Google Chrome Microsoft Edge DoS

The vulnerability of Google Lens components in Google Chrome and Microsoft Edge browsers is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure through the use of a specially created HTML page...

Network Component Confidential Data Access

The vulnerability of the Network component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Password component compromise Data Compromise

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

libyuv DoS

The vulnerability of the libyuv component in Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause a service outage through a specially created HTML page...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Dawn Component Confidential Data Access

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

CVE-2026-82881: Improper Neutralization of Input During Web Page Generation

Aix-DB through 1.2.4 renders markdown with raw HTML enabled into v-html bindings without sanitization, allowing stored cross-site scripting attacks. Attackers can inject malicious HTML and JavaScript through markdown content in chat responses, skill descriptions, or knowledge messages that execut...

PT-2026-83775

Name of the Vulnerable Software and Affected Versions HTML::FormFu versions prior to 2.09 Description Repeatable elements allow resource exhaustion through an unbounded repeat count provided via the query string. When a Repeatable element has counter name set, the process function reads the repea...

CVE-2026-75802: Improper Neutralization of Input During Web Page Generation

AjaxEditableChoiceLabel in wicket-extensions, when constructed with a non-null IChoiceRenderer, writes the display value obtained from that renderer into the label's markup without applying the HTML escaping Wicket performs by default for component model values. An attacker who can influence the...

DataTransfer Component Confidential Data Access

The vulnerability of the DataTransfer component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Google Chrome Permissions control element Data Compromise

The vulnerability of the Permissions control element in Google Chrome and Microsoft Edge is related to a lack of data protection mechanisms. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

DevTools DoS

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge relates to reading data beyond the acceptable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

Wallet Component Compromise Data Compromise

The vulnerability of the Wallet component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

Paint Component Confidential Data Access

The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to improper protection against attacks via external physical channels. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

Font Component Confidential Data Access

The vulnerability of the Font component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

File Input Component DoS

The vulnerability of the File Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

TabStrip Component DoS

The vulnerability of the TabStrip component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Extensions Component Data Compromise

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to manipulate data integrity through a specially crafted HTML page...

InterestGroups Component DoS

The vulnerability of the InterestGroups component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...