PT-2026-127297

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption in the Payments component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page...

PT-2026-127269

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Memory corruption in HTML allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-127283

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 156.0.8078.73 Description Improper input validation in Metrics allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google...

PT-2026-127291

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in the ReadingList component allows a remote attacker to potentially execute arbitrary code inside the sandbox by inducing the user to visit a crafted HTML pag...

PT-2026-126343

Semantic MediaWiki from 4.2.0 before 7.3.1 contains a stored cross-site scripting vulnerability that allows authenticated profile or schema editors to inject HTML through FacetedSearch exploration-link labels. Attackers can store markup in the label, which ExploreListBuilder::buildHTML passes...

Google Chrome Vulnerability: CVE-2026-118329

Improper input validation in ANGLE in Google Chrome on on Mac prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome input validation error vulnerability

Google Chrome for Mac versions prior to 156.0.8078.73 contain an input validation error vulnerability. This vulnerability stems from improper input validation in the Metrics component and may allow remote attackers to execute arbitrary code within a sandbox by using specially crafted HTML pages...

Google Chrome Vulnerability: CVE-2026-118314

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-118318

Improper access control in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to read memory via a crafted HTML page. Chromium security severity: High...

Mozilla Firefox security vulnerabilities

A security vulnerability exists in Mozilla Firefox versions prior to 159, Firefox ESR versions prior to 115.44, Firefox ESR versions prior to 153.6, Thunderbird versions prior to 159, and Thunderbird versions prior to 153.6. This vulnerability stems from a use-after-free issue in the DOM: Core &...

Mozilla Firefox security vulnerabilities

Mozilla Firefox has a security vulnerability stemming from a use-after-free issue in its DOM HTML parser component, which may lead to memory corruption...

ROS-20261027-73-0101

The vulnerability in the Browser component of Google Chrome and Microsoft Edge is related to improper use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

CVE-2026-116687: Improper Neutralization of Input During Web Page Generation

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. From 29.0.0 until 47.7.4 and 48.5.1, specially crafted markup can trigger cross-site scripting when General HTML Support is enabled and specifically configured to allow object content. Processing that content can execute...

Sisense Cloud BI Platform cross-site scripting vulnerability

Versions of Sisense Cloud BI Platform prior to 27/10/2026 contain a cross-site scripting vulnerability. This vulnerability stems from stored XSS in BloX widgets; the desc and text parameters in the /api/dashboards//widgets/ API accept HTML and JavaScript content. When these components are rendere...

PT-2026-138515

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

PT-2026-138549

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

PT-2026-138527

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

CVE-2026-78661: golang.org/x/net golang.org/x/net/html: When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string…

When coalescing adjacent text nodes in addText and fosterParent, appending to an existing TextNode's Data via string concatenation n.Data += text reallocated and copied the accumulated string on every token. Inputs containing many short text runs separated by ignored end tags such as "a" caused...

PT-2026-138543

In childTextNodesAreLiteral, walking up the tree previously stopped at the nearest foreign ancestor once an HTML integration point was found. However, that integration point may itself be a descendant of an element that was foster-parented into a foreign namespace such as or fostered under ,...

Alertus Desktop Alert 5.4.98.0 Remote HTML Injection

Alertus Desktop Alert version 5.4.98.0 contains an unauthenticated remote HTML injection vulnerability due to certificate validation bypass. The proof of concept serves forged attacker-signed alert responses that inject HTML into the client and includes a browser protocol-handler demonstration...