CVE-2026-57535: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

Content injected to PDF rendering contexts could, in many places, include HTML content including tags. If the src attribute of these images pointed to an URL, the PDF rendering engine would download the image from that place and display it, thereby leaking information about the rendering server a...

Google Chrome PDFium Input Validation Error Vulnerability (CNVD-2019-26516)

Google Chrome is the United States Google Google company's a Web browser. PDFium is one of the open source PDF rendering engine. An input validation error vulnerability exists in PDFium in versions prior to Google Chrome 76.0.3809.87. An attacker can exploit this vulnerability by tricking a user...