CVE-2026-109725: Use After Free

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network service of Google Chrome and Microsoft Edge is related to information disclosure due to a mismatch. Exploiting this vulnerability enables a remote attacker to gain access to protected information via a specially crafted HTML page...

Network Service Compromise Data Compromise

The vulnerability in the Network service of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network Browser service of Google Chrome and Microsoft Edge is related to information disclosure. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network service of Google Chrome and Microsoft Edge is related to improper resource initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge stems from insufficient input validation. Exploitation of this vulnerability enables a remote attacker to gain access to protected information via a specially crafted HTML page...

DevTools Suite DoS

The vulnerability in Google Chrome and Microsoft Edge’s DevTools web development tools is related to insufficient neutralization of special elements in requests. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

DevTools Suite Compromise Protected Information

The vulnerability in Google Chrome and Microsoft Edge’s DevTools web development tools is related to improper implementation of client-side security functions. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially...

DevTools Suite DoS

The vulnerability in Google Chrome and Microsoft Edge’s DevTools web development tools is related to improper thread management. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge Access Information Disclosure

The Autofill function vulnerability in Google Chrome and Microsoft Edge is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information by using a specially crafted HTML page...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge relates to resource operations occurring after the expiration or release of a resource. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge stems from a flaw in the data source validation mechanism. Exploitation of this vulnerability enables a remote attacker to gain access to protected information via a specially crafted HTML page...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

DevTools Suite DoS

The vulnerability in Google Chrome and Microsoft Edge’s DevTools web development tools is related to insufficient input validation. Exploiting this vulnerability allows a remote attacker to trigger a denial of service by using a specially crafted HTML page...

DevTools Suite DoS

The vulnerability in Google Chrome and Microsoft Edge’s DevTools web development tools is related to memory usage after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

DevTools Suite Compromise Protected Information

The vulnerability in Google Chrome and Microsoft Edge’s DevTools web development tools involves cross-site request forgery. Exploiting this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Google Chrome Microsoft Edge Access Information Disclosure

The Autofill function vulnerability in Google Chrome and Microsoft Edge is related to information disclosure due to a mismatch. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

PT-2026-121826

net/http: HTTP/2 server crash due to HPACK encoder race net/http: HTTP/2 server memory exhaustion due to Trailer headers crypto/tls: reject malformed ECH outer extension references cmd/go: checksum bypass for golang.org/fips140 cmd/go: checksum database bypass for golang.org/toolchain...

CVE-2026-110146: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...