SUSE CVE-2026-109780

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

EUVD-2026-100651

Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-100652

Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-114000

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.16...

@cedarjs/api-server (>=1.0.0-canary.12859, <=1.0.0-canary.12861), @cedarjs/cli (>=1.0.0-canary.12859, <=1.0.0-canary.12861) +12 more potentially affected by unknown CVE via react-server-dom-webpack (19.0.1)

react-server-dom-webpack NPM version 19.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on react-server-dom-webpack and may be impacted: - @cedarjs/api-server =1.0.0-canary.12859, =1.0.0-canary.12859, =1.0.0-canary.12859, =1.0.0-canary.12859,...

Google Chrome Microsoft Edge DOM Component Access

The DOM component vulnerability in Google Chrome and Microsoft Edge web browsers is related to information disclosure. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

@cedarjs/api-server-watch (>=6.0.3-next.227, <=8.0.0-canary.3460), @cedarjs/cli (>=6.0.3-next.227, <=8.0.0-canary.3460) +10 more potentially affected by unknown CVE via react-server-dom-webpack (19.3.0)

react-server-dom-webpack NPM version 19.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-server-dom-webpack and may be impacted: - @cedarjs/api-server-watch =6.0.3-next.227, =6.0.3-next.227, =6.0.3-next.227, =6.0.3-next.227, =6.0.3-next.227,...

CVE-2026-107870: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Crocoblock JetEngine jet-engine allows DOM-Based XSS.This issue affects JetEngine: from n/a through 3.8.16...

Google Chrome Microsoft Edge DOM Component Access

The DOM component vulnerability in Google Chrome and Microsoft Edge web browsers is related to information disclosure. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Google Chrome Microsoft Edge DOM Component Access

The DOM component vulnerability in Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-110163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-110164

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted...

Adobe Experience Manager 2026.0.0 < 2026.9.28386 Multiple Vulnerabilities (APSB26-152)

The version of Adobe Experience Manager installed on the remote host is prior to 2026.9.28386. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB26-152 advisory. - Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in...

WS-2026-0170

react-server-dom-webpack/-turbopack 19.0.0-19.0.8 and 19.0.0 beta/rc builds, react-server-dom-webpack/-turbopack/-parcel 19.1.0-19.1.9, 19.2.0-19.2.8, 19.3.0 and 19.x canary builds before the fix: the React Server Components response writer emits typed arrays as views over their whole underlying...

WS-2026-0151

react-server-dom-webpack/-turbopack 19.0.0-19.0.8 and 19.0.0 beta/rc builds, react-server-dom-webpack/-turbopack/-parcel 19.1.0-19.1.9, 19.2.0-19.2.8, 19.3.0 and 19.x canary builds before the fix: the Server Functions reply decoder rescans the whole submitted FormData for referenced form data and...

@amazeelabs/bridge-waku (>=1.1.0, <=2.0.1), @amazeelabs/executors (>=3.0.0, <=3.1.14) +51 more potentially affected by unknown CVE via react-server-dom-webpack (>=19.0.0-canary-36e62c603-20240418, <=19.0.1)

react-server-dom-webpack NPM version =19.0.0-canary-36e62c603-20240418, =1.1.0, =3.0.0, =1.1.0, =1.1.0, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245, =1.0.0-canary.12245, =0.9.1-next.19, =1.0.0-canary.12245, =1.0.0-canary.12245...

@cedarjs/api-server (>=1.0.0-canary.12863, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=6.0.0-canary.2828, <=9.0.0-canary.3124) +43 more potentially affected by unknown CVE via react-server-dom-webpack (>=19.2.1, <=19.2.8)

react-server-dom-webpack NPM version =19.2.1, =1.0.0-canary.12863, =6.0.0-canary.2828, =1.0.0-canary.12863, =5.0.4-next.167, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =3.0.0-canary.13429, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863,...

@cedarjs/api-server (>=1.0.0-canary.12863, <=9.0.0-canary.1784), @cedarjs/api-server-watch (>=6.0.0-canary.2828, <=9.0.0-canary.3124) +43 more potentially affected by unknown CVE via react-server-dom-webpack (>=19.2.1, <=19.2.8)

react-server-dom-webpack NPM version =19.2.1, =1.0.0-canary.12863, =6.0.0-canary.2828, =1.0.0-canary.12863, =5.0.4-next.167, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =3.0.0-canary.13429, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863, =1.0.0-canary.12863,...

@cedarjs/api-server-watch (>=6.0.3-next.227, <=8.0.0-canary.3460), @cedarjs/cli (>=6.0.3-next.227, <=8.0.0-canary.3460) +10 more potentially affected by unknown CVE via react-server-dom-webpack (19.3.0)

react-server-dom-webpack NPM version 19.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on react-server-dom-webpack and may be impacted: - @cedarjs/api-server-watch =6.0.3-next.227, =6.0.3-next.227, =6.0.3-next.227, =6.0.3-next.227, =6.0.3-next.227,...

CVE-2026-110164

Use after free in DOM in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...