CVE-2026-79207

CVE-2026-79207 is an information leak in the Passwords component of Google Chrome on iOS , affecting versions prior to 152.0.7977.65 . A local attacker can obtain sensitive information by supplying a crafted file . Chromium rates the severity as Low , while NVD assigns a CVSS 3.1 score of 6.5 (ME...

CVE-2026-79058

CVE-2026-79058 is a missing authorization flaw in the Passwords feature of Google Chrome prior to 152.0.7977.65 . An attacker who has already compromised the browser's renderer process can use a crafted HTML page to spoof UI elements , potentially misleading users into interacting with fake inter...

CVE-2026-79058

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79058

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-79049

An incorrect reference resolution flaw in the Passwords component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a specially crafted file. Per Red Hat, this could lead to unauthorized access to sensitive system resources . The CV...

CVE-2026-79049

Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...

CVE-2026-79049

Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. Chromium security severity: Medium...

CVE-2026-79212

CVE-2026-79212 is a missing authorization flaw in the Passwords component of Google Chrome prior to 152.0.7977.65 (Windows, Mac, Linux). A remote attacker who had already compromised the browser's renderer process could leverage social engineering to bypass the web origin policy via a crafted HTM...

CVE-2026-79212

Missing authorization in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

PT-2026-81772

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the Passwords component allows a remote attacker to bypass the web origin policy. This occurs when an attacker has compromised the renderer process and uses...

PT-2026-81767

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 152.0.7977.65 Description An information leak exists that allows a local attacker to obtain sensitive information, such as passwords, by using a crafted file. Recommendations Update Google Chrome on iOS t...

PT-2026-81643

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Passwords component allows a remote attacker to bypass system access restrictions by using a crafted file. Recommendations Update Google Chrome ...

PT-2026-81652

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the password handling mechanism allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page...

Fake GTA 6 Extended Look and demo sites deliver an infostealer

GTA 6 footage really has leaked online, and Rockstar has an official Extended Look coming to Netflix on August 27. But cybercriminals are exploiting the hype with fake Rockstar sites that lead visitors to password-stealing malware. We identified a network of sites appearing in searches for a GTA ...

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in LibreOffice

LibreOffice supports the storage of passwords for web connections in the user’s configuration database. The stored passwords are encrypted using a single master key provided by the user. There was a flaw in LibreOffice where the master key was poorly encoded, resulting in a reduction in its entro...

Astra Linux – Vulnerability in Zabbix

When exporting media types, the passwords are exported in plain text within the YAML file. This appears to be a best practices issue and may not actually have any significant impact. The user must have permissions to access the media types, and therefore it is expected that they will have access ...

Astra Linux – Vulnerability in Ceph

A flaw was discovered in Ceph versions prior to 16.y.z, where Ceph stores mgr module passwords in plain text. This can be identified by searching the mgr logs using Grafana and the dashboard, as the passwords are visible...

CVE-2026-60083

SiYuan versions before v3.8.0 have an incomplete path blocklist in the MCP file tool that fails to restrict access to sensitive workspace files normally protected by the HTTP API. An authenticated administrator can read plaintext publish-mode passwords from data/.siyuan/publishAccess.json and acc...

CVE-2026-55765

CloudNativePG (a Kubernetes-based PostgreSQL management platform) prior to 1.28.4 and 1.29.2 embedded cleartext role passwords in ALTER ROLE and CREATE ROLE statements generated by SetUserPassword and appendPasswordOption. When pg_stat_statements was preloaded with track_utility enabled, an untru...