Fullscreen vulnerability Google Chrome Microsoft Edge

The Fullscreen vulnerability in Google Chrome and Microsoft Edge browsers is related to the lack of request source preservation. Exploitation of this vulnerability enables a remote attacker to gain access to protected information and trigger a denial-of-service condition via a specially crafted...

Google Chrome Desktop Code Execution

The vulnerability of the Google Chrome browser’s Desktop component is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

WebXR Interface Compromise Protected Information

The WebXR interface vulnerability in Google Chrome and Microsoft Edge is related to a flaw in the data source validation mechanism. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the Password component of Google Chrome and Microsoft Edge web browsers is related to insecure privilege management. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML page...

Dawn Component Protected Information Access

The vulnerability in the Dawn component of Google Chrome and Microsoft Edge web browsers is related to errors in variable initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Chromecast Component DoS

The vulnerability in the Chromecast components of Google Chrome and Microsoft Edge is related to improper memory usage after deallocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in Google’s Google Lens component for Google Chrome and Microsoft Edge involves the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected data by using a specially...

USB Component DoS

The vulnerability in the USB components of Google Chrome and Microsoft Edge is related to insufficient validation of the state of shared resources. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-108831

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A security vulnerability has been detected in meetecho janus-gateway up to 1.4.2. This vulnerability affects unknown code of the file html/demos/admin.js of the...

Linux Distros Unpatched Vulnerability : CVE-2026-113654

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Prior to sanitize-html...

Linux Distros Unpatched Vulnerability : CVE-2026-109597

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Hugo from v0.60.0 before v0.167.0 contains a stored cross-site scripting vulnerability that allows Markdown content authors to inject HTML by supplying crafted...

Google Chrome Microsoft Edge Data Compromise

The UI component vulnerability in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected data by using a specially crafted HTML page...

html/template: golang: golang: cross-site scripting via consecutive expressions in JavaScript template literals

A flaw was found in the html/template package in Go. This vulnerability allows a remote attacker to conduct cross-site scripting XSS, an attack that executes malicious scripts in a user's browser through improper output escaping. When a JavaScript template literal contains consecutive expressions...

html/template: golang: html/template: Cross-site scripting via improper escaping of yield keyword

A flaw was found in Go's html/template component. This vulnerability allows cross-site scripting XSS due to improper escaping of the 'yield' keyword during template processing. A remote attacker could exploit this flaw by providing crafted input to an affected template, leading to arbitrary scrip...

DEBIAN-CVE-2026-113343

Incorrect authorization in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113343

Incorrect authorization in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113340

Uninitialized resource in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-113337

Use after free in Scroll in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-113331

Observable discrepancy in Controls in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-113334

Buffer overflow in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...