CVE-2026-88920

A flaw was found in Apache WSS4J. This vulnerability in the Document Object Model DOM security processor allows an unauthenticated remote attacker to bypass authentication and forge authenticated Simple Object Access Protocol SOAP messages. An attacker can exploit this issue by submitting a...

CVE-2024-28397-Js2Py-RCE

CVE-2024-28397-Js2Py-RCE 描述 此仓库包含针对 CVE-2024-28397 的基于 Python 的概念验证（PoC）代码，该漏洞是 Python 的 Js2Py JavaScript 解释器中的沙箱逃逸漏洞。 当目标应用程序通过 Js2Py 评估不受信任的 JS 代码时，攻击者可以逃逸沙箱并执行任意 Python 代码。这可用于在易受攻击的系统上实现远程代码执行（RCE）和反弹 shell。 此漏洞利用工具的灵感来自 Marven11 的 CVE-2024-28397-js2py-Sandbox-Escape 项目。 免责声明...

CVE-2026-79179

A flaw was found in Chromium's Document Object Model DOM due to incorrect authorization. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could potentially lead to the leakage of sensitive information...

Chromium: CVE-2026-79185 Information leak in DOM

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-78975

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the Document Object Model DOM allows a remote attacker to obtain sensitive information. The attacker can exploit this by enticing a user to visit a specially crafted HTML page...

Astra Linux – Vulnerability in Firefox

Mitigation bypass in the DOM: Security component. This vulnerability was fixed in Firefox 150, Firefox ESR 140.10, Thunderbird 150, and Thunderbird 140.10...

Astra Linux – Vulnerability in Firefox

DOM spoofing issue: Core & HTML components. This vulnerability has been fixed in Firefox 152 and Thunderbird 152...

Astra Linux – Vulnerability in Firefox

Privilege escalation in the DOM: Workers component. This vulnerability was fixed in Firefox 151, Firefox ESR 140.11, Thunderbird 151, and Thunderbird 140.11...

Astra Linux – Vulnerability in Firefox

JIT compilation errors in the DOM: Core & HTML components. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Firefox ESR 115.37, Thunderbird 152, and Thunderbird 140.12...

Astra Linux – Vulnerability in Firefox

Use-after-free in the DOM: Networking component. This vulnerability was fixed in Firefox 150.0.2, Firefox ESR 140.10.2, Firefox ESR 115.35.2, Thunderbird 150.0.2, and Thunderbird 140.10.2...

firefox: thunderbird: Mitigation bypass in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Networking component...

firefox: thunderbird: Same-origin policy bypass in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Same-origin policy bypass in the DOM: Navigation component...

firefox: thunderbird: Privilege escalation in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...

RHEL 8 : thunderbird (RHSA-2026:49922)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2026:49922 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fixes: firefox: thunderbird: Site isolation issue in the DOM:...

firefox: thunderbird: Privilege escalation in the DOM: Content Processes component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Content Processes component...

firefox: thunderbird: Mitigation bypass in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Networking component...

firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the DOM: Bindings WebIDL component...

firefox: thunderbird: Mitigation bypass in the DOM: Networking component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Mitigation bypass in the DOM: Networking component...

firefox: thunderbird: Invalid pointer in the DOM: Bindings (WebIDL) component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Invalid pointer in the DOM: Bindings WebIDL component...

firefox: thunderbird: Site isolation issue in the DOM: Navigation component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: We are aware that exploit code for this is public however we are not aware of any attacks in the wild abusing this flaw...