209749 matches found
Skia Confidential Data Access
The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
DevTools DoS
The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Skia DoS
The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Video Capture Component Compromise Data Compromise
The vulnerability of the Video Capture component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise data integrity through a specially crafted HTML page...
Linux Layer 2 Tunneling Protocol DoS
The vulnerability of the l2tpxmitcore function in the net/l2tp/l2tpcore.c module, which is part of the Linux L2TP protocol implementation, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to cause a service failure...
RHEL 9 : golang (RHSA-2026:62602)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62602 advisory. The golang packages provide the Go programming language compiler. Security Fixes: encoding/asn1: golang: Go encoding/asn1: Denial of Servic...
RHEL 9 : osbuild-composer (RHSA-2026:62754)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:62754 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...
Chromoting DoS
The vulnerability of the Chromoting component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...
Workers mechanism Code Execution
The vulnerability of the Workers mechanism in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
Network Component Confidential Data Access
The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Omnibox address bars compromise Data Compromise
The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge lies in insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to manipulate data integrity through a specially created HTML page...
CVE-2026-84325
Google Chrome and Microsoft Edge (Chromium-based) versions prior to 152.0.7977.75 are vulnerable to a High severity security bypass due to improper input validation in the DataTransfer component. A remote attacker can leverage social engineering to bypass system access restrictions via a co-insta...
CVE-2026-84325
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...
CVE-2026-84325
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...
CVE-2026-84325
Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...
CVE-2026-84357
Improper input validation in the Omnibox component of Google Chrome (prior to version 152.0.7977.75) allows a remote attacker to bypass web origin policy using crafted network traffic and social engineering. This vulnerability also affects Microsoft Edge and Chromium -based browsers. Potential im...
CVE-2026-84357
Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...
CVE-2026-84357
Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...
CVE-2026-84357
Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...
CVE-2026-84477
AVideo Liveschedule::setTitle and setDescription store POST input without sanitization, allowing users with streaming permission to inject malicious scripts. Unauthenticated attackers can access remindMe.php to execute stored XSS payloads in victim browsers without requiring authentication...