Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a security vulnerability. This vulnerability stems from the use of Extensions that reuse resources after release, which could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a resource management vulnerability. This vulnerability stems from the reuse of resources after their release within frames, which could allow remote attackers to execute arbitrary code within the sandbox through a specially crafted HTML page...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a resource management vulnerability. This vulnerability stems from the reuse of extensions after they are released, which may allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a security vulnerability. This vulnerability stems from an issue with Actor objects that allow for reusing after being released. This could allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome Resource Management Error Vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a security vulnerability. This vulnerability stems from a problem with the Input component, where reused instances after being released can allow remote attackers to execute arbitrary code within a sandbox through a specially crafted HTML page...

Google Chrome buffer error vulnerability

Google Chrome versions prior to 156.0.8078.47 contain a buffer error vulnerability. This vulnerability stems from memory corruption in the API, which may allow remote attackers to execute arbitrary code within a sandbox via specially crafted HTML pages...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a buffer overflow vulnerability. This vulnerability stems from memory corruption in Chromoting, allowing remote attackers to read memory within the sandbox through a specially crafted HTML page...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a buffer overflow vulnerability. This vulnerability stems from memory corruption in HTML code; remote attackers can execute arbitrary code within a sandbox through specially crafted HTML pages...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 contain a buffer overflow vulnerability. This vulnerability stems from an out-of-bounds read in the ANGLE library, which could allow remote attackers to access memory within the sandbox through a specially crafted HTML page...

Google Chrome buffer error vulnerability

Versions of Google Chrome prior to 156.0.8078.47 have a security vulnerability. This vulnerability stems from memory corruption in DevTools, which could allow remote attackers to execute arbitrary code in the sandbox through a specially crafted HTML page...

Apostrophe Technologies ApostropheCMS Cross-site Scripting Vulnerability

Apostrophe Technologies' ApostropheCMS has a cross-site scripting vulnerability. This vulnerability stems from the default configuration of sanitize-html, which allows meta refresh elements, along with their http-equiv and content attributes, to retain unsafe scripts or redirection targets embedd...

CVE-2026-64944

Apache Answer versions through 2.0.2 are vulnerable to a stored Cross-Site Scripting (XSS) flaw due to improper neutralization of input during web page generation. The root cause is that the importer saves question bodies as raw HTML, bypassing the standard Markdown-to-HTML sanitization path. Thi...

CVE-2026-64944 Apache Answer: Stored XSS via unsanitized HTML in imported question content

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Apache Answer. This issue affects Apache Answer: through 2.0.2. The importer stores imported question bodies as raw HTML without passing them through the normal Markdown-to-HTML sanitization path, ...

Astra Linux – vulnerability in Firefox

DOM use-after-free: Core & HTML components. This vulnerability has been fixed in Firefox 155, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and Thunderbird 153.2...

Astra Linux – vulnerability in Firefox and Thunderbird

JIT miscompilation in the DOM: Core & HTML component. This vulnerability has been fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page

A flaw was found in ANGLE, a graphics engine used in Google Chrome. This vulnerability, caused by improper validation of an array index, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation can occur when a user visits a specially crafted HTML...

chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page

A flaw was found in ANGLE in Google Chrome. A remote attacker could exploit an out-of-bounds read vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to read memory outside of the browser's security sandbox, leading to information...

chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds read vulnerability allows a remote attacker to read memory outside of the browser's security sandbox. The flaw can be exploited by enticing a user to visit a specially crafted HTML page. The primary consequence is the...

chromium-browser: angle: ANGLE in Google Chrome: Arbitrary code execution via crafted HTML page

A flaw was found in ANGLE, a graphics engine used in Google Chrome. This vulnerability, caused by improper validation of an array index, allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. Exploitation can occur when a user visits a specially crafted HTML...

chromium-browser: angle: ANGLE in Google Chrome: Information disclosure via crafted HTML page

A flaw was found in ANGLE, a component of Google Chrome. This out-of-bounds read vulnerability allows a remote attacker to read memory outside of the browser's security sandbox. The flaw can be exploited by enticing a user to visit a specially crafted HTML page. The primary consequence is the...