SUSE CVE-2026-109724

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

SUSE CVE-2026-109725

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

EUVD-2026-100633

Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...

EUVD-2026-100636

Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

EUVD-2026-100653

Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-110592: Improper Encoding or Escaping of Output

BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in renderinvoicetemplate that allows authenticated organization members to inject markup into custom-template invoice PDFs. Attackers can place HTML and CSS in notes, terms, client name or address fields to overlay totals, pay...

CVE-2026-110718: Server-Side Request Forgery (SSRF)

TurboDocx html-to-docx through 1.23.1 contains a server-side request forgery vulnerability that allows attackers supplying HTML to make the server fetch internal URLs via img src attributes. Attackers can reference loopback, private, or cloud metadata addresses that bypass the loose isValidUrl...

Navigation Component Google Chrome Microsoft Edge Protected Information DoS

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge relates to the false representation of critical information to the user interface. Exploiting this vulnerability can allow a malicious actor to gain access to protected information, as well as cause service...

Views Component DoS

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

WebRTC Component Access Protected Information

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge is related to insufficient validation of input protected information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

Sandbox DoS

The vulnerability of the Sandbox component in Google Chrome and Microsoft Edge relates to improper authentication. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially created HTML page...

USB Component Compromise Protected Information

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to improper authentication procedures. Exploiting this vulnerability allows a remote attacker to compromise the integrity of protected information through a specially created HTML page...

Canvas Component Protected Information Access

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

Skia Component Protected Information Access

The vulnerability of the Skia component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

FileSystem Component Google Chrome Microsoft Edge DoS

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge lies in insufficient checking of the status of the shared resource. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

Media Component DoS

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input protected information. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of the FileSystem component in Google Chrome and Microsoft Edge relates to reading protected information beyond the allowed buffer size. Exploiting this vulnerability could allow an attacker to gain access to protected information through a specially created HTML page...

Transactions Platform XSS

The vulnerability of the Transactions Platform web browsers Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Payments Component Google Chrome Microsoft Edge Information Disclosure

The vulnerability of the Payments component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to protected information through a specially created HTML page...

Parser Component DoS

The vulnerability of the Parser component in Google Chrome and Microsoft Edge is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...