10382 matches found
PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)
...
Chromium: CVE-2026-16415 Insufficient validation of untrusted input in Extensions
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
SUSE CVE-2026-52686
The issue is a DNSSEC validation bypass where wildcard expansion proofs NSEC/NSEC3 records are accepted without signature validation when the wildcard answer is a CNAME or DNAME record...
OPENSUSE-SU-2026:21438-1 Security update for chromium
This update for chromium fixes the following issues: Changes in chromium: - Chromium 150.0.7871.181 boo1272156: CVE-2026-16420: Type Confusion in WebAudio CVE-2026-16421: Inappropriate implementation in WebAudio CVE-2026-16413: Out of bounds write in ANGLE CVE-2026-16414: Insufficient validation ...
Microsoft Edge (Chromium) < 150.0.4078.96 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 150.0.4078.96. It is, therefore, affected by multiple vulnerabilities as referenced in the July 23, 2026 advisory. - Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182...
KLA91173 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Edge Chromium-base...
PT-2026-64443
Name of the Vulnerable Software and Affected Versions pymdown-extensions version 10.21.3 Description The b64 extension inlines images referenced by as base64 data URIs. The repl path function in pymdownx/b64.py fails to verify that the resolved path remains within the configured base path. An...
CVE-2026-48537 GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configuration that allows authenticated attackers to inject arbitrary web script or HTML via the excluded extensions parameter to /Archiver/FileArchiveAssistantWizard.aspx. The injected...
CVE-2026-48537
GFI Archiver
EUVD-2026-48296
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configuration that allows authenticated attackers to inject arbitrary web script or HTML via the excluded extensions parameter to /Archiver/FileArchiveAssistantWizard.aspx. The injected...
CVE-2026-48537 GFI Archiver < 15.13 Stored XSS via FileArchiveAssistantWizard.aspx
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configuration that allows authenticated attackers to inject arbitrary web script or HTML via the excluded extensions parameter to /Archiver/FileArchiveAssistantWizard.aspx. The injected...
CVE-2026-48537
GFI Archiver before 15.13 contains a stored cross-site scripting vulnerability in the File Archive Assistant configuration that allows authenticated attackers to inject arbitrary web script or HTML via the excluded extensions parameter to /Archiver/FileArchiveAssistantWizard.aspx. The injected...
CVE-2026-56416
A vulnerability in Unbound allows remote attackers using malicious DNSSEC-signed servers to send malformed records that trigger a heap buffer overflow. This can cause a denial of service or potential limited information disclosure. Mitigation To mitigate this issue, consider disabling DNSSEC...
Astra Linux – Vulnerability in Chromium
Inappropriate implementations in Extensions in Google Chrome prior to version 149.0.7827.103 allowed a remote attacker who had compromised the renderer process to bypass site isolation through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Before version 150.0.7871.47, using extensions in Google Chrome allowed a remote attacker to execute arbitrary code within a sandbox through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted XML file. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted Chrome Extension. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Insufficient validation of untrusted input in Extensions in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Integer overflow in the Extensions API in Google Chrome prior to version 150.0.7871.115 allowed an attacker who convinced a user to install a malicious extension to perform an out-of-bounds memory read through a crafted Chrome Extension. Chromium security severity: High...