CVE-2026-119267

Google Chrome versions prior to 156.0.8078.79 are vulnerable to a memory corruption flaw within the DOM component. A remote attacker could leverage this vulnerability to potentially execute arbitrary code inside the sandbox by facilitating a crafted HTML page . The issue has been addressed in the...

CVE-2026-119267

Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2026-119267

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafte...

PT-2026-132875

Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-119267: Google Chrome: Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute…

Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2026:4928-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:4928-1 advisory. Update to Firefox Extended Support Release 153.6.0 ESR MFSA 2026-112, MFSA 2026-120, bsc1286385: - CVE-2026-100801: Privilege...

CVE-2026-61673

Prior to version 3.8.7 , the web manager WeGIA for charitable institutions is vulnerable to a stored DOM cross-site scripting (XSS) vulnerability in web/html/memorando/listar_despachos.php. The root cause is the unsafe handling of the texto field: while FILTER_SANITIZE_SPECIAL_CHARS is applied du...

CVE-2026-61673

WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in "web/html/memorando/listardespachos.php" results from unsafe handling of the "texto" field. The affected flow spans "web/controle/memorando/DespachoControle.php" and...

CVE-2026-61673 WeGIA: Stored DOM XSS in listar_despachos.php Allows Account Takeover

WeGIA is a web manager for charitable institutions. Prior to 3.8.7, a stored DOM cross-site scripting vulnerability in web/html/memorando/listardespachos.php results from unsafe handling of the texto field. The affected flow spans web/controle/memorando/DespachoControle.php and...

CLSA-2026-1793297326 TuxCare security update for react-server-dom-webpack (2 CVEs)

TuxCare rebuilt react-server-dom-webpack to address 2 CVEs. Fixed in 19.0.0-tuxcare.3...

CLSA-2026-1793295328 TuxCare security update for react-server-dom-turbopack (2 CVEs)

TuxCare rebuilt react-server-dom-turbopack to address 2 CVEs. Fixed in 19.0.0-tuxcare.2...

firefox: thunderbird: Privilege escalation in the DOM: Service Workers component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Service Workers component...

firefox: thunderbird: Sandbox escape in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape in the DOM: Navigation component...

firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Content Processes component...

firefox: Sandbox escape due to use-after-free in the DOM: Content Processes component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Content Processes component...

firefox: thunderbird: Undefined behavior in the DOM: Streams component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Undefined behavior in the DOM: Streams component...

firefox: thunderbird: Use-after-free in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

firefox: Use-after-free in the DOM: Core & HTML component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

firefox: Use-after-free in the DOM: Core & HTML component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

firefox: thunderbird: Use-after-free in the DOM: Core & HTML component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...