116794 matches found
Web Authentication Components Compromise Data Compromise
The vulnerability of the Web Authentication components Passkeys & Security Keys in Google Chrome and Microsoft Edge is related to the user interfaceās false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected...
Cache Component Protected Information Access
The vulnerability of the Cache component in Google Chrome and Microsoft Edge relates to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
PermissionElement Component Compromise
The vulnerability of the PermissionElement component in Google Chrome and Microsoft Edge relates to the improper presentation of critical information to the user interface. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a...
Media Component DoS
The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to the improper implementation of the sequence of actions to be performed. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created HTML page...
Component DoS
The vulnerability of the Browser component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...
Component Access Information Disclosure
The vulnerability of the Browser component in Google Chrome and Microsoft Edge relates to the user interfaceās false representation of critical information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information through a specially created...
Preload Component Access Information Disclosure
The vulnerability of the Preload component in Google Chrome and Microsoft Edge is related to insufficient validation of the input protected information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
CVE-2026-103974: Improper Neutralization of Input During Web Page Generation
lichess.org is the forever free, adless and open source chess server. Prior to commit c54596c9e1569d378fe20f80d4c790c6fdee54c4, a user who can add a chapter to a study can place attacker-controlled text in the PGN Annotator tag, which becomes Comment.Author.External and is returned verbatim by...
Linux Distros Unpatched Vulnerability : CVE-2026-110146
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information vi...
Linux Distros Unpatched Vulnerability : CVE-2026-110141
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium...
Preload Component Access Information Disclosure
The vulnerability of the Preload component in Google Chrome and Microsoft Edge involves exposing information in an erroneous protected area. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
CVE-2026-97315: Improper Neutralization of Special Elements in Output Used by a Downstream Component
The Responsive Blocks WordPress plugin before 2.3.0 does not sanitise or escape some of the values submitted with its Form block before adding them to the HTML notification email sent to the site owner, allowing unauthenticated users to inject arbitrary HTML, such as phishing links, into that ema...
BFCache Component Protected Information Access
The vulnerability of the BFCache component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
Views Component DoS
The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
Navigation Component Google Chrome Microsoft Edge Protected Information DoS
The vulnerability of the Navigation component in Google Chrome and Microsoft Edge relates to the false representation of critical information to the user interface. Exploiting this vulnerability can allow a malicious actor to gain access to protected information, as well as cause service...
PT-2026-114034
šØ CVE-2026-110592 BottleCRM 0.30 through 1.14.5 contains an HTML injection vulnerability in render invoice template that allows authenticated organization members to inject markup into custom-template invoice PDFs. Attackers can place HTML and CSS in notes, terms, client name or address fields to...
CVE-2026-110172
Use after free in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-110162
Use after free in Desktop in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-110165
Use after free in Core in Google Chrome on on Android prior to 155.0.8059.79 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...