USB Component DoS

The vulnerability in the USB components of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability in the Browser component of Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as cause a denial-of-service...

Fullscreen vulnerability Google Chrome Microsoft Edge

The Fullscreen vulnerability in Google Chrome and Microsoft Edge browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected data by using a specially crafted HTML...

Zero Point - Critical - Cross-site scripting - SA-CONTRIB-2026-222

The ZeroPoint theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by th...

PT-2026-120505

The HappyForms WordPress plugin before 1.26.15 does not sanitise or escape a user-controlled referral value before embedding it in the form notification email, allowing unauthenticated attackers to inject arbitrary HTML into the emails site administrators receive...

Payments Component Data Compromise

The vulnerability in the Payments component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input protected information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially...

Global Media Controls Component Compromise

The vulnerability in the Global Media Controls component of Google Chrome and Microsoft Edge web browsers is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected data by...

Payments Component DoS

The vulnerability in the Payments component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability allows a remote attacker to trigger a denial-of-service condition by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The HTML component vulnerability in Google Chrome and Microsoft Edge web browsers is related to memory usage after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Dawn Component DoS

The vulnerability in the Dawn component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Payments Component Data Compromise

The vulnerability in the Payments component of Google Chrome and Microsoft Edge stems from insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-109725

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and...

ANGLE Library DoS

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge web browsers is related to the use of a name with an incorrect reference. Exploiting this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Media Component DoS

The Media component vulnerability in Google Chrome and Microsoft Edge web browsers is related to insufficient validation of user-supplied protected information. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML page...

Google Chrome Edge ReaderMode Data Compromise

The vulnerability in the ReaderMode component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input protected information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a special...

Bluetooth Component DoS

The vulnerability in the Bluetooth components of Google Chrome and Microsoft Edge is related to insufficient validation of input protected information. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-113650

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ApostropheCMS is an open-source Node.js content management system. In sanitize-html 2.18.0, when an is not allowed and disallowedTagsMode is 'discard' the...

Linux Distros Unpatched Vulnerability : CVE-2026-113661

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to sanitize-html...

PT-2026-120901

The Black Hole theme provides configurable layouts and visual styling for Drupal websites, including support for Font Awesome icons in navigation menus. The theme does not sufficiently sanitize menu link titles before inserting them into HTML class attributes. This vulnerability is mitigated by t...