CVE-2026-56830

Shopper (Headless e-commerce Admin Panel) is affected by a missing authorization check in the Media sub-form (packages/admin/src/Livewire/Components/Products/Form/Media.php). The store() method lacked the authorize('edit_products') call that was added to five sibling sub-forms (Edit, Inventory, S...

Chromium CVE-2026-87456: Uninitialized resource in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

ROS-20260915-73-0023

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow vulnerability in Google Chrome’s Media component on Linux, prior to version 88.0.4324.182, allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of after-free in the Media component in Google Chrome before version 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

Before version 99.0.4844.51, using "After Free" in the Media section of Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

ROS-20260914-73-0050

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260914-73-0082

The vulnerability of the Media component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created video file...

ROS-20260914-73-0069

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260914-73-0096

The vulnerability of the Google Chrome browser’s Media component relates to reading beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code using a specially created HTML page...

ROS-20260914-73-0072

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260914-73-0128

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to errors in HTTP request processing. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

CVE-2026-87638

A flaw was found in Google Chrome's Media component. A remote attacker could exploit an out-of-bounds write vulnerability by enticing a user to visit a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code outside of the browser's security sandbox...

ROS-20260911-73-0118

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260911-73-0142

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to errors in HTTP requests processing. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a malicious file...

ROS-20260911-73-0054

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to bypass the sandboxing protection mechanisms...

ROS-20260911-73-0104

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260911-73-0170

The vulnerability of the Media component in Google Chrome and Microsoft Edge browsers is related to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data...

ROS-20260911-73-0061

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260910-73-0083

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...