SUSE CVE-2026-121252

Incorrect authorization in Core in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-121254

Information leak in Select in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-121008

The SQL::Abstract::Tree module for Perl (versions before 2.000001_04 ) is vulnerable to Cross-Site Scripting (XSS) . The root cause is that the format method fails to HTML-escape SQL text or bind values when using the html profile , which is designed to output markup for web pages. This allows an...

EUVD-2026-116928

SQL::Abstract::Tree versions before 2.00000104 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile. The html profile wraps keywords and placeholders in span elements and breaks lines with br elements, so its output is meant to go into a page as is. The...

CVE-2026-121008 SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile

SQL::Abstract::Tree versions before 2.00000104 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile. The html profile wraps keywords and placeholders in span elements and breaks lines with br elements, so its output is meant to go into a page as is. The...

CVE-2026-121008 SQL::Abstract::Tree versions before 2.000001_04 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile

SQL::Abstract::Tree versions before 2.00000104 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile. The html profile wraps keywords and placeholders in span elements and breaks lines with br elements, so its output is meant to go into a page as is. The...

CVE-2026-121008

SQL::Abstract::Tree versions before 2.00000104 for Perl allow cross-site scripting via unescaped SQL text and bind values in the html profile. The html profile wraps keywords and placeholders in span elements and breaks lines with br elements, so its output is meant to go into a page as is. The...

CVE-2026-114627 Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output

Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output. Under use HTML::Tags or use XML::Tags, a double-quoted string literal becomes a StringThing object that holds each interpolated value as a separate part. The escaping step...

CVE-2026-114627

The Web::Simple module for Perl (versions before 0.036 ) is vulnerable to Cross-Site Scripting (XSS) via the HTML::Tags and XML::Tags components. The root cause is that values interpolated into double-quoted strings are stored as separate parts in a StringThing object; while standalone values are...

EUVD-2026-116926

Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output. Under use HTML::Tags or use XML::Tags, a double-quoted string literal becomes a StringThing object that holds each interpolated value as a separate part. The escaping step...

CVE-2026-114627 Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output

Web::Simple versions before 0.036 for Perl do not escape values interpolated into double-quoted strings in HTML::Tags output. Under use HTML::Tags or use XML::Tags, a double-quoted string literal becomes a StringThing object that holds each interpolated value as a separate part. The escaping step...

CVE-2026-121632 Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping

Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping. processattrs writes each attribute value into the markup as is. The select, radio group and checkbox group renderers pass each option to it, so an option's value becomes an unescaped...

CVE-2026-121632

The Data::MuForm Perl module, in versions through 0.05 , is vulnerable to Cross-site Scripting (XSS) because it renders attribute values and option labels into HTML without proper escaping. Specifically, the process_attrs function writes values as-is, and the renderers for select, radio, and chec...

EUVD-2026-116916

Data::MuForm versions through 0.05 for Perl render attribute values and option labels into HTML without escaping. processattrs writes each attribute value into the markup as is. The select, radio group and checkbox group renderers pass each option to it, so an option's value becomes an unescaped...

CVE-2026-121249

A buffer overflow flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574752676 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of...

CVE-2026-121229

A memory corruption flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562777838 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application o...

CVE-2026-121197

An out of bounds read flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/566398391 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application...

CVE-2026-121100

An use after free flaw was found in the DOM component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/570796613 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of an...

CVE-2026-121086

A buffer overflow flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/569674218 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the application of a...

CVE-2026-121061

An use after free flaw was found in the Modularization component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/576723181 Mitigation --- CME Mitigation Guidance 2026-11-04 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...