Gemini AI Assistant Sensitive Data Access

The Gemini AI assistant vulnerability formerly known as GLIC in Gemini Live in Chrome in Google Chrome and Microsoft Edge involves the user interface’s false presentation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a...

Google Chrome Skia DoS

The vulnerability of Google Chrome’s Skia graphics library is related to errors in HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

ANGLE Component Confidential Data Access

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Ozone Component DoS

The vulnerability in the Ozone component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory allocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Media component Code Execution

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code within the sandbox by using a specially created HTML page...

Google Chrome Microsoft Edge Compromise Data Compromise

The GPU component vulnerability in Google Chrome and Microsoft Edge is related to an integer overflow. Exploitation of this vulnerability enables a remote attacker to affect the availability of protected information by using a specially crafted HTML page...

Web Authentication Sandbox Bypass

The vulnerability in the Web Authentication component of Google Chrome and Microsoft Edge is related to the ability to use memory after it has been freed. Exploiting this vulnerability enables a remote attacker to bypass sandbox security mechanisms by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the FileSystem component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploiting this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Component DoS

The vulnerability in the Browser component of Google Chrome and Microsoft Edge is related to improper use of memory after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Autofill Component Sensitive Data Access

The vulnerability in the Autofill component of Google Chrome and Microsoft Edge is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

Blink InterestGroups Component DoS

The vulnerability in the BlinkInterestGroups component of Google Chrome and Microsoft Edge web browsers is related to reading beyond the permitted buffer boundaries. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML page...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Blink Component DoS

The Blink component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the Views component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploiting this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge Sensitive Data DoS

The vulnerability in the Navigation component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data, as well as trigger a denial-of-service condition via a...

CVE-2026-84348: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84701: Improper Neutralization of Input During Web Page Generation

NocoBase fails to sanitize rich text field values in the read renderer, allowing users with create permissions to store malicious HTML with event handlers. Attackers can write arbitrary markup through the collection API that executes in the browsers of all users viewing the affected record...

CVE-2026-81807: Improper Neutralization of Input During Web Page Generation

The Simple Ajax Chat WordPress plugin before 20260827 does not escape chat message content before rendering it, allowing unauthenticated users to inject arbitrary HTML attributes into the page and run scripts in the browser of anyone viewing the chat, including administrators...