IndexedDB DoS

The vulnerability of the IndexedDB component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

Extensions API Confidential Data Access

The vulnerability of the Extensions API in Google Chrome and Microsoft Edge browsers is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to gain access to confidential data...

Ozone Component DoS

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Payments Component DoS

The vulnerability of the Payments component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Google Chrome Edge DoS

The vulnerability of the GetUserMedia component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to cause service interruptions through a specially created HTML pag...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to improper code generation. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

FedCM Component Data Compromise

The vulnerability of the FedCM component in Google Chrome and Microsoft Edge browsers is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

WebAppInstalls Component Confidential Data Compromise

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to sensitive data and compromise its integrity through a specially crafted HTML page...

Views Component DoS

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

AZL-98487 CVE-2026-73276 affecting package erlang for versions less than 26.2.5.21-6

Gracefulness code ignored cases that should be rejected, resulting in possible HTTP Request Smuggling opportunities. This issue affects OTP from OTP 22.2 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 7.1.2 before 9.3.2.7,...

GLSA-202609-01 : Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202609-01 Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in Chromium, Google Chrome, Microsoft Edge, Opera, and Vivaldi. Please review the CVE...

Chromium, Google Chrome, Microsoft Edge, Opera, Vivaldi: Multiple Vulnerabilities

Background Chromium is an open-source browser project that aims to build a safer, faster, and more stable way for all users to experience the web. Google Chrome is one fast, simple, and secure browser for all your devices. Microsoft Edge is a browser that combines a minimal design with...

CVE-2026-51693

Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to weaken edge filtering via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-66324

creationtimestamp| type| source ---|---|--- 2026-08-31 04:45:17+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...

CVE-2026-66323

creationtimestamp| type| source ---|---|--- 2026-08-31 04:45:14+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...

CVE-2026-62904

creationtimestamp| type| source ---|---|--- 2026-08-31 04:45:12+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...

CVE-2026-58616

creationtimestamp| type| source ---|---|--- 2026-08-31 04:45:10+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260831...

CVE-2026-51693: Improper Access Control

Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to weaken edge filtering via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

EUVD-2026-68588

Incorrect access control in the setVpnPassCfg function of TOTOLINK T6 4.1.5cu.748B20211015 allows unauthenticated attackers to weaken edge filtering via sending a crafted POST request to /cgi-bin/cstecgi.cgi...

CVE-2026-51693

The TOTOLINK T6 wireless dual-band Mesh router (version 4.1.5cu.748_B20211015 ) is vulnerable to an improper access control flaw in the setVpnPassCfg function. This vulnerability allows unauthenticated attackers to weaken edge filtering by sending a specially crafted POST request to the /cgi-bin/...