119078 matches found
PT-2026-118936
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.47 Description A range error in SiteIsolation allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. SiteIsolation is a security feature that...
PT-2026-119013
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper input validation in Views allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to version...
PT-2026-118796
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 156.0.8078.47 Description Improper input validation in the Omnibox allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Updat...
PT-2026-119019
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Memory corruption in Dawn allows a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to version...
PT-2026-118754
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description Improper access control in ComputePressure allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from on...
PT-2026-118732
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description An out of bounds read exists in the API, which could allow a remote attacker to read memory inside the sandbox by using a specially crafted HTML page. An out of bounds read occurs when...
Google Chrome Vulnerability: CVE-2026-113036
Memory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
Google Chrome Vulnerability: CVE-2026-113086
Improper input validation in Input in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
Google Chrome Vulnerability: CVE-2026-113199
Out of bounds read in Payments in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
Google Chrome Vulnerability: CVE-2026-113062
Improper input validation in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...
Google Chrome Vulnerability: CVE-2026-113225
Memory corruption in Browser in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-118502
Name of the Vulnerable Software and Affected Versions sanitize-html versions 2.17.7 through 2.17.9 Description An issue exists where application configurations permitting namespace-prefixed SVG animation elements and relevant URL-targeting attributes can bypass SMIL URL protection. This occurs...
PT-2026-132952
Security vulnerability affects the gatekeeper-fips package. Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree...
Google Chrome buffer error vulnerability
Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from an out-of-bounds read in GetUserMedia, potentially allowing remote attackers to read memory within the sandbox via specially crafted HTML pages...
Google Chrome Vulnerability: CVE-2026-113157
Information leak in ANGLE in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote attacker to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...
PT-2026-120291
Summary sanitize-html 2.17.7 introduced animatesUrlAttribute to block SVG animation elements animate, animateColor, animateMotion, animateTransform, set when their attributeName targets a URL sink like href. However, this check is bypassed when the animation element uses a namespace prefix e.g.,...
Google Chrome Vulnerability: CVE-2026-113226
Memory corruption in Model in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Low...
PT-2026-132986
Security vulnerability affects the keycloak package. OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS...