Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network service of Google Chrome and Microsoft Edge is related to improper handling of web page structure. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Network services DoS

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML page...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge stems from insufficient input validation. Exploitation of this vulnerability enables a remote attacker to gain access to protected information via a specially crafted HTML page...

DevTools Suite DoS

The vulnerability in Google Chrome and Microsoft Edge’s DevTools web development tools is related to insufficient neutralization of special elements in requests. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

DevTools Suite DoS

The vulnerability in Google Chrome and Microsoft Edge’s DevTools web development tools is related to insufficient input validation. Exploiting this vulnerability allows a remote attacker to trigger a denial of service by using a specially crafted HTML page...

DevTools Suite Compromise Protected Information

The vulnerability in Google Chrome and Microsoft Edge’s DevTools web development tools is related to improper implementation of client-side security functions. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially...

DevTools Suite Compromise Protected Information

The vulnerability in Google Chrome and Microsoft Edge’s DevTools web development tools involves cross-site request forgery. Exploiting this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTML page...

Google Chrome Microsoft Edge Access Information Disclosure

The Autofill function vulnerability in Google Chrome and Microsoft Edge is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information by using a specially crafted HTML page...

Google Chrome Microsoft Edge Access Information Disclosure

The Autofill function vulnerability in Google Chrome and Microsoft Edge is related to a flaw in the data source validation mechanism. Exploitation of this vulnerability enables a remote attacker to gain access to protected information via a specially crafted HTML page...

Google Chrome Microsoft Edge Access Information Disclosure

The Autofill function vulnerability in Google Chrome and Microsoft Edge is related to information disclosure due to a mismatch. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network service of Google Chrome and Microsoft Edge is related to information disclosure due to a mismatch. Exploiting this vulnerability enables a remote attacker to gain access to protected information via a specially crafted HTML page...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network services of Google Chrome and Microsoft Edge is related to insufficient protection of sensitive data. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Google Chrome Microsoft Edge Unauthorized Access

The vulnerability in the Downloads component of Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability enables a remote attacker to gain unauthorized access to protected data via a specially crafted HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability in the Downloads component of Google Chrome and Microsoft Edge is related to incomplete cleanup of temporary or auxiliary resources. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a specially crafted HTM...

PT-2026-111445

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description A use-after-free issue exists in the DOM: Core & HTML component. Use-after-free is a memory...

PT-2026-111446

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Firefox ESR versions prior to 115.43 Firefox ESR versions prior to 153.5 Thunderbird versions prior to 158 Thunderbird versions prior to 153.5 Description A use-after-free issue exists within the DOM: Core & HTML...

Network service Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Network browser services of Google Chrome and Microsoft Edge stems from a flaw in the data source validation mechanism. Exploitation of this vulnerability enables a remote attacker to gain access to protected information via a specially crafted HTML page...

CVE-2026-93892

IBM TRIRIGA Application Platform 5.0.0 through 5.0.8 could allow a remote authenticated attacker to obtain sensitive information due to exposure of session tokens in the HTML response...

CVE-2026-109653

Frappe ERPNext before 15.119.0 and 16.x before 16.31.0 contains a stored cross-site scripting vulnerability because record fields are rendered into an HTML attribute context without escaping. A low-privilege user can store a malicious payload in a record field that executes in the browser of any...

CVE-2026-109601

Frappe Framework before 15.117.0 and 16.x before 16.30.0 contains an arbitrary file read vulnerability in the handling of attributes in outgoing email HTML. Attackers who can supply outgoing email content can set an attribute value referencing a local file path to expose sensitive server files...