CVE-2026-79023

A flaw was found in chromium-browser. This incorrect authorization vulnerability in the Editing component allows a remote attacker to obtain sensitive information. The attacker can achieve this by persuading a user to open a specially crafted HTML page...

CVE-2026-78943

A flaw was found in Google Chrome. This improper input validation vulnerability in the Editing component could allow a remote attacker, who has already compromised the renderer process and used social engineering, to bypass the web origin policy. This bypass is achieved by tricking a user into...

Linux Distros Unpatched Vulnerability : CVE-2026-79196

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a...

CVE-2026-79196

Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-78943

Improper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79196

A race condition in the Editing feature of Google Chrome prior to 152.0.7977.65 allows a remote attacker, leveraging social engineering, to obtain sensitive information via a crafted HTML page. Chromium rates this as Low severity, with a CVSS 3.1 score of 5.3 (Medium) reflecting the high attack c...

CVE-2026-79023

Incorrect authorization in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79023

CVE-2026-79023 is an incorrect authorization flaw in the Editing component of Google Chrome prior to 152.0.7977.65 (also affecting chromium-browser ). A remote attacker can obtain sensitive information by persuading a user to open a crafted HTML page. The flaw carries a CVSS 3.1 score of 6.5 (Med...

PT-2026-81756

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A race condition exists in the editing component. A remote attacker can use social engineering to lure a user to a crafted HTML page, which may allow the attacker to obtain sensitive...

CVE-2025-71164

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the Editing component. The images parameter submitted as images in a POST request is reflected into an HTML href attribute without proper context-aware output encoding in...

CVE-2025-71164

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the Editing component. The images parameter submitted as images in a POST request is reflected into an HTML href attribute without proper context-aware output encoding in...

CVE-2025-71164

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the Editing component. The images parameter submitted as images in a POST request is reflected into an HTML href attribute without proper context-aware output encoding in...

CVE-2025-71164 Typesetter CMS Reflected XSS via Editing.php

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the Editing component. The images parameter submitted as images in a POST request is reflected into an HTML href attribute without proper context-aware output encoding in...

EUVD-2026-2437

Typesetter CMS versions up to and including 5.1 contain a reflected cross-site scripting XSS vulnerability in the Editing component. The images parameter submitted as images in a POST request is reflected into an HTML href attribute without proper context-aware output encoding in...

PT-2026-2944

Name of the Vulnerable Software and Affected Versions Typesetter CMS versions up to and including 5.1 Description Typesetter CMS versions up to and including 5.1 have a reflected cross-site scripting XSS issue in the Editing component. The images parameter, submitted as images in a POST request, ...

EUVD-2020-13383

Malware in sbrugna...

CVE-2020-20598

A cross-site scripting XSS vulnerability in the Editing component of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML...

Cross site scripting

A cross-site scripting XSS vulnerability in the Editing component of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-20598

A cross-site scripting XSS vulnerability in the Editing component of lemon V1.10.0 allows attackers to execute arbitrary web scripts or HTML...

Lemon OA 跨站脚本漏洞

Lemon OA is an open source office OA system developed by XuHuisheng personal developer using the Java language.Lemon OA V1.10.0 version of the Editing component has a security vulnerability that can be exploited by attackers to execute arbitrary web scripts or HTML...