burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

CVE-2026-113326

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by enticing a user to load a specially crafted HTML page, triggering memory corruption. This issue allows the attacker to read memory within the browser's restricted sandbox environment, potentially leading t...

CVE-2026-113304

A flaw was found in chromium-browser. A memory corruption vulnerability in the Graphics Processing Unit GPU component can lead to information disclosure. A remote attacker could exploit this flaw by convincing a user to visit a specially crafted HTML page, potentially allowing the attacker to rea...

CVE-2026-113296

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption vulnerability in the Actor component by convincing a user to open a specially crafted HTML page. Successful exploitation allows the attacker to read memory within the sandbox an isolated security environment...

CVE-2026-113333

A flaw was found in the Extensions component of chromium-browser. A remote attacker could exploit this vulnerability by enticing a user to view a specially crafted HTML page, triggering memory corruption. This issue allows the attacker to read memory contents within the sandbox environment, leadi...

CVE-2026-113322

A flaw was found in chromium-browser. This memory corruption vulnerability in the Dawn graphics component can result in information disclosure. A remote attacker can exploit this flaw by enticing a user to view a specially crafted HTML page. Successful exploitation allows the attacker to read...

CVE-2026-113225

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to cause information disclosure by triggering memory corruption through a specially crafted HTML page. By convincing a user to open the malicious page, an attacker can read memory contents within the browser's...

CVE-2026-113196

A flaw was found in chromium-browser. This vulnerability allows information disclosure by enabling a remote attacker to bypass the web origin policy, which normally prevents scripts on one website from accessing data on another. By convincing a user to open a specially crafted HTML page, an...

CVE-2026-113193

A flaw was found in chromium-browser. This flaw leads to information disclosure due to a memory corruption issue in the V8 JavaScript engine. A remote attacker can exploit this vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation allows the attacker to...

CVE-2026-113237

A flaw was found in chromium-browser. A memory corruption vulnerability in the Chromoting component allows a remote attacker to read memory from within the browser sandbox an isolated execution environment via a crafted HTML page. Successful exploitation results in unauthorized information...

CVE-2026-113223

A flaw was found in the DevTools component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by tricking a user into loading a specially crafted HTML page. Successful exploitation could allow the attacker to read memory within the sandbox environment,...

CVE-2026-113178

A flaw was found in chromium-browser. A memory corruption vulnerability in the Views component allows a remote attacker to cause information disclosure by convincing a user to open a specially crafted HTML page. Successful exploitation enables the attacker to read process memory from within the...

CVE-2026-113343

A flaw was found in chromium-browser. A memory corruption vulnerability exists within the browser sandbox, an isolated security environment designed to contain untrusted processes. A remote attacker could exploit this flaw by enticing a user to load a crafted HTML page, leading to arbitrary code...

CVE-2026-113342

A flaw was found in chromium-browser. A remote attacker can exploit a memory corruption issue in the Network component by tricking a user into visiting a crafted HTML page. Successful exploitation allows the attacker to bypass the security sandbox an isolated execution environment and execute...

CVE-2026-113331

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to potentially execute arbitrary code inside the browser sandbox by enticing a user to visit a crafted HTML page. The issue stems from memory corruption within the browser's Controls component...

CVE-2026-113335

A flaw was found in the Extensions component of chromium-browser. This memory corruption issue allows a remote attacker to execute arbitrary code inside the browser's restricted security environment sandbox. To exploit this vulnerability, an attacker must trick a user into visiting a specially...

CVE-2026-113318

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption issue in the ServiceWorker component by convincing a user to visit a specially crafted HTML page. Successful exploitation allows the attacker to execute arbitrary code within the browser's sandbox environmen...

CVE-2026-113303

A flaw was found in the Web Real-Time Communication WebRTC component of chromium-browser. This memory corruption vulnerability allows a remote attacker to achieve arbitrary code execution inside the browser sandbox by convincing a user to visit a specially crafted HTML page...

CVE-2026-113294

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code inside the browser's isolated sandbox environment by convincing a user to open a crafted HTML page. The vulnerability stems from improper input validation within the Loader component...

CVE-2026-113316

A flaw was found in the Views component of chromium-browser. Due to improper input validation, a remote attacker could execute arbitrary code within the browser sandbox environment by convincing a user to visit a specially crafted HTML page...