PT-2026-111500

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Thunderbird versions prior to 158 Description A mitigation bypass exists within the DOM: Core & HTML component. Recommendations Update Firefox to version 158. Update Thunderbird to version 158...

Network services Google Chrome Microsoft Edge Unauthorized Access

The vulnerability in the Network service of Google Chrome and Microsoft Edge is related to information disclosure due to a mismatch. Exploiting this vulnerability enables a remote attacker to gain unauthorized access to protected information via a specially crafted HTML page...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability in the Downloads component of Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected data, as well as cause a...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability in the Downloads component of Google Chrome and Microsoft Edge is related to information disclosure. Exploitation of this vulnerability may allow a remote attacker to gain unauthorized access to protected information via a specially crafted HTML page...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Network Service Compromise Data Compromise

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge is related to authorization errors. Exploiting this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Network Service Compromise Data Compromise

The vulnerability in the Network service of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network service of Google Chrome and Microsoft Edge is related to improper handling of web page structure. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

DevTools Suite DoS

The vulnerability in Google Chrome and Microsoft Edge’s DevTools web development tools is related to insufficient input validation. Exploiting this vulnerability allows a remote attacker to trigger a denial of service by using a specially crafted HTML page...

CVE-2026-110228: Improper Neutralization of Input During Web Page Generation

wallabag 2.6.13 through 2.6.14 contains a stored cross-site scripting vulnerability that allows authenticated users to host arbitrary HTML by triggering a failed Pocket HTML, Pocket CSV or Shaarli import. Attackers can upload an HTML file with script but no anchor elements, leaving it at the...

CVE-2026-103418: Improper Neutralization of Input During Web Page Generation

Firefox for iOS directly interpolated the page’s HTML language attribute into translation JavaScript, allowing attacker-controlled markup to execute code in Firefox’s privileged content world and bypass the page’s Content Security Policy. This vulnerability was fixed in Firefox for iOS 157.1...

PT-2026-113502

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description A use after free issue exists in Bindings, which allows a remote attacker to read memory inside the sandbox by using a specially crafted HTML page. Use after free is a memory corruption...

CVE-2026-110101: Improper Neutralization of Input During Web Page Generation

Koillection through 1.8.4 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML files as Datum file attachments lacking MIME restrictions. Attackers can upload HTML payloads via POST /api/data/id/file, served as text/html from public/uploads, executin...

PT-2026-111697

bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML or SVG files by spoofing the multipart Content-Type in POST /api/upload. Attackers can upload script-bearing documents served inline from /res and send their URLs to...

CVE-2026-109780: Undefined Security Weakness

Mitigation bypass in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-92883: Improper Neutralization of Input During Web Page Generation

GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.1 before 19.2.8, 19.3 before 19.3.5, and 19.4 before 19.4.2 that, under certain conditions, could have allowed an authenticated user to execute arbitrary JavaScript in the context of other users' browser sessions via a...

CVE-2026-102989: Improper Neutralization of Input During Web Page Generation

TanStack Router is a client-first, server-capable, fully type-safe router and full-stack framework for the web. From 1.143.12 until 1.169.39 for @tanstack/start-server-core, 1.168.60 for @tanstack/react-start, 1.168.57 for @tanstack/solid-start, and 1.168.56 for @tanstack/vue-start, an...

VulnCheck KEV: CVE-2026-86444

The LearnPress WordPress plugin before 4.4.7 does not escape a user supplied value before using it in an HTML attribute on a public page, allowing unauthenticated attackers to execute arbitrary JavaScript in the browser of anyone who opens a crafted link, including a logged in administrator. Only...

CVE-2026-93892

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response...

CVE-2026-109653

Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulnerability because record fields are rendered into an HTML attribute context without escaping. A low-privilege user can store a malicious payload in a record field that executes in the browser of any...