CVE-2026-126865

An use after free flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/573335176...

CVE-2026-121182

An use after free flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/576169244 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an...

CVE-2026-121100

An use after free flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570796613 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an...

CVE-2026-119267

An use after free flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/576203565...

Google Chrome Microsoft Edge DOM Component Access

The DOM component vulnerability in Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

CVE-2026-113187

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to execute arbitrary code inside the browser sandbox by convincing a user to view a specially crafted HTML page. The issue is caused by a use-after-free memory error within the Document Object Model DOM component...

CVE-2026-110913

A memory corruption flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/567638392...

CVE-2026-110164

An use after free flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568730794...

CVE-2026-110163

An use after free flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568831102...

CVE-2026-91736

Use after free in DOM in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-92042

Race condition in the DOM: Content Processes component. This vulnerability was fixed in Firefox 156, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 153.3...

CVE-2026-92030 Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component. This vulnerability was fixed in Firefox 156, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, Thunderbird 140.16, and Thunderbird 153.3...

CVE-2026-92030

A mitigation bypass exists in the DOM: Copy & Paste and Drag & Drop component of the Mozilla Firefox and Mozilla Thunderbird browsers. This vulnerability was addressed in Firefox versions 156, ESR 140.16, and ESR 153.3, as well as Thunderbird versions 156, 140.16, and 153.3. Security advisories f...

CVE-2026-92028

A Use-after-free vulnerability exists in the DOM: Core & HTML component of the Mozilla Firefox and Thunderbird web browsers. This flaw was addressed in Firefox 156 , Firefox ESR 115.41 , Firefox ESR 140.16 , Firefox ESR 153.3 , Thunderbird 156 , Thunderbird 140.16 , and Thunderbird 153.3 . While ...

CVE-2026-92018

A sandbox escape vulnerability exists in the DOM: Core & HTML component of Mozilla Firefox and Thunderbird . This flaw allows an attacker to bypass the sandbox environment, potentially leading to a significant impact on the host system. Affected versions include Firefox 156 , Firefox ESR 115.41 ,...

EUVD-2026-78481

Sandbox escape in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3, Thunderbird 156, and Thunderbird 140.16...

OESA-2026-3790 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...

firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Push Subscriptions component...

firefox: thunderbird: Information disclosure in the DOM: Push Subscriptions component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: Push Subscriptions component...

ROS-20260909-73-0055

The vulnerability of the DOM components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...