6597 matches found
SUSE CVE-2026-95320
Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...
Linux Distros Unpatched Vulnerability : CVE-2026-95355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Navigation. CVE-2026-95355 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C...
Linux Distros Unpatched Vulnerability : CVE-2026-95287
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site...
Linux Distros Unpatched Vulnerability : CVE-2026-95320
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to spoof address...
Navigation Component Google Chrome Microsoft Edge DoS
The vulnerability of the Navigation component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure...
Linux Distros Unpatched Vulnerability : CVE-2026-92025
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 156, Firefox ESR 115.41, Firefox ESR 140.16, Firefox ESR 153.3,...
CVE-2026-95813
The software e621ng (versions before 26.09.16 ) is vulnerable to an Open Redirect due to the improper handling of untrusted request parameters. Specifically, the PaginatorComponent and controller navigation links pass these parameters directly to the Rails url_for function. An attacker can provid...
Malicious code in @client-web-next/navigation-link (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-16505 Malicious code in @client-web-next/navigation-link (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2026-95813: URL Redirection to Untrusted Site
e621ng versions before 26.09.16 pass untrusted request parameters directly to Rails urlfor in PaginatorComponent and controller navigation links, allowing attackers to redirect pagination and navigation controls to attacker-controlled origins. Attackers can supply host, protocol, and port query...
firefox: thunderbird: Use-after-free in the DOM: Navigation component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Navigation component...
CVE-2026-84136
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Other issue in the DOM: Navigation component...
firefox: thunderbird: Use-after-free in the DOM: Navigation component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Navigation component...
CVE-2026-84140
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the DOM: Navigation component Mitigation Update to Firefox ESR 153.2, Firefox ESR 140.15, or Firefox 155 or later. Red Hat will provide updated Firefox...
CVE-2026-84129
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the DOM: Navigation component...
OESA-2026-3982 thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: Sandbox escape due to use-after-free in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 115.40, Firefox ESR 140.15, Firefox ESR 153.2, Thunderbird 155, Thunderbird 140.15, and...
CVE-2026-92069
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the DOM: Navigation component...
firefox: Sandbox escape due to use-after-free in the DOM: Navigation component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Sandbox escape due to use-after-free in the DOM: Navigation component...
CVE-2026-92025
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Navigation component...
CVE-2026-84088: Improper Neutralization of Input During Web Page Generation
The Xpro Addons — 140+ Widgets for Elementor WordPress plugin before 1.7.9 does not validate or sanitize a widget link setting before storing and using it in a JavaScript navigation call, allowing users with the contributor role and above to inject and store JavaScript that executes in the browse...