Google Chrome resource management error vulnerability

Google Chrome for Mac versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from use-after-free issues within Internals, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain an input validation error vulnerability. This vulnerability stems from improper FullScreen input validation; remote attackers can exploit it by sending specially crafted HTML pages to execute arbitrary code within a sandbox...

Google Chrome input validation error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain an input validation error vulnerability. This vulnerability stems from improper UI input validation and may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in the API, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a resource management error vulnerability. This vulnerability stems from post-release reuse of extensions, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome resource management error vulnerability

A security vulnerability exists in Google Chrome versions prior to 156.0.8078.47. This vulnerability stems from post-release reuse in SVG, potentially allowing remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability stemming from memory corruption in PDF processing. Remote attackers can exploit this via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in Paint, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

CVE-2026-109352

LibreNMS versions prior to 26.9.0 are vulnerable to a stored cross-site scripting (XSS) vulnerability located in includes/html/pages/device/wireless.inc.php. The root cause is the lack of proper output escaping when the application echoes sensor_descr values, which are populated from SNMP Display...

CVE-2026-109352 LibreNMS before 26.9.0 Stored XSS via wireless sensor description

LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored...

CVE-2026-109352 LibreNMS before 26.9.0 Stored XSS via wireless sensor description

LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored...

CVE-2026-109352: Improper Neutralization of Input During Web Page Generation

LibreNMS before 26.9.0 contains a stored cross-site scripting vulnerability in includes/html/pages/device/wireless.inc.php, which echoes wireless sensor sensordescr values, populated from SNMP DisplayString fields during discovery, into HTML without escaping. Attackers controlling a monitored...

Google Chrome has an authorization vulnerability (CNVD-2026-37834)

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a vulnerability related to authorization issues, which stems from improper authorization in the Actor component. Attackers can exploit this vulnerability to obtain sensitive information through specially crafted HTML...

Google Chrome has an authorization vulnerability

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a vulnerability related to authorization issues, which stems from the ControlledFrame component lacking proper authorization. Attackers can exploit this vulnerability to bypass system access restrictions through...

Google Chrome Authorization Issue Vulnerability

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a licensing issue vulnerability, which stems from improper licensing management in CORS. Attackers can exploit this vulnerability by using specially crafted HTML pages to bypass Web source policies...

Google Chrome Authorization Vulnerability (CNVD-2026-37840)

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a licensing vulnerability, which stems from improper licensing management in the DOM. Attackers can exploit this vulnerability to leak sensitive information through specially crafted HTML pages...

Google Chrome Authorization Vulnerability (CNVD-2026-37842)

Google Chrome is a free web browser developed by Google Inc. Google Chrome has a licensing issue vulnerability, which stems from improper licensing management in FedCM. Attackers can exploit this vulnerability by using specially crafted HTML pages to bypass Web source policies...

Google Chrome Authorization Vulnerability (CNVD-2026-37837)

Google Chrome is a free web browser developed by Google Inc. There is an authorization vulnerability in Google Chrome, which stems from incorrect DataTransfer authorization. Attackers can exploit this vulnerability to obtain sensitive information through specially crafted HTML pages...

ROS-20260915-73-0062

The vulnerability of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through the created HTML pages...

CVE-2026-84188

LibreNMS versions configuration settings, which are echoed verbatim without HTML escaping in includes/html/pages/graphs.inc.php. An administrator can store a malicious HTML payload that executes in the browser of any authenticated user who views the affected graph type. The issue is fixed in...