Google Chrome permission and access control issue vulnerability

Versions of Google Chrome prior to 156.0.8078.73 contain a vulnerability related to permission escalation and access control. This issue stems from improper V8 access control and may allow remote attackers to read memory via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome for Mac versions prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper input validation in the Metrics component and may allow remote attackers to execute arbitrary code within a sandbox by using specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.73 contain a buffer error vulnerability. This vulnerability stems from memory corruption in Turbolev; remote attackers can exploit it by sending specially crafted HTML pages to execute arbitrary code outside the sandbox...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in GetUserMedia, potentially allowing remote attackers to read memory within the sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues in APIs and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Google Chrome for Mac versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues within Internals, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain an input validation error vulnerability. This vulnerability stems from improper FullScreen input validation; remote attackers can exploit it by sending specially crafted HTML pages to execute arbitrary code within a sandbox...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in ANGLE, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in the Payments component, potentially allowing remote attackers to read memory within the sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability stemming from memory corruption in PDF processing. Remote attackers can exploit this via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from post-release reuse of extensions, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain an input validation error vulnerability. This vulnerability stems from improper UI input validation and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

A security vulnerability exists in Google Chrome versions prior to 156.0.8078.47. This vulnerability stems from post-release reuse in SVG, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in Paint, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in the API, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

CVE-2026-109352 LibreNMS before 26.9.0 Stored XSS via wireless sensor description

LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored...

CVE-2026-109352

LibreNMS versions prior to 26.9.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability located in includes/html/pages/device/wireless.inc.php. The root cause is the lack of proper output escaping when the application echoes sensor_descr values, which are populated from SNMP Display...

CVE-2026-109352 LibreNMS before 26.9.0 Stored XSS via wireless sensor description

LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored...

CVE-2026-109352: Improper Neutralization of Input During Web Page Generation

LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored...

Google Chrome Authorization Vulnerability (CNVD-2026-37842)

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a licensing issue vulnerability, which stems from improper licensing management in FedCM. Attackers can exploit this vulnerability by using specially crafted HTML pages to bypass Web source policies...