CVE-2026-95367

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-100242

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0...

CVE-2026-100242 DataTransfer depends on phpspreadsheet version vulnerable to CVE-2026-59933 (XLS/OLE memory exhaustion)

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0...

CVE-2026-100242

The Mediawiki - DataTransfer Extension (versions 1.46.0 before 1.47.0 ) is vulnerable to a Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption (CWE-1395, CWE-400). The issue stems from a dependency on a phpspreadsheet version susceptible to CVE-2026-59933 , which ...

EUVD-2026-89081

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0...

CVE-2026-100242 DataTransfer depends on phpspreadsheet version vulnerable to CVE-2026-59933 (XLS/OLE memory exhaustion)

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0...

CVE-2026-100242: Dependency on Vulnerable Third-Party Component

Dependency on Vulnerable Third-Party Component and Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Excessive Allocation. This issue affects Mediawiki - DataTransfer Extension: from 1.46.0 before 1.47.0...

PT-2026-102676

Name of the Vulnerable Software and Affected Versions Mediawiki - DataTransfer Extension versions 1.46.0 through 1.46.x Description The Mediawiki - DataTransfer Extension contains a dependency on a vulnerable third-party component that leads to uncontrolled resource consumption, specifically...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95367): chromium -- security fixes

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95367: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

The confused deputy in DataTransfer in Google Chrome before version 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a co-installed app. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Information leakage in DataTransfer in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information through a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Race conditions in DataTransfer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information through a crafted HTML page, using social engineering techniques. Chromium security severity: Low...

Chromium CVE-2026-95367: Information leak in DataTransfer

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21921-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21921-1 advisory. Changes in chromium: - Chromium 153.0.8010.52 boo1281123: CVE-2026-93374: Use after free in Dawn CVE-2026-93372: Buffer overflow in WebGL...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in DataTransfer in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-95367

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...