116888 matches found
CVE-2026-81924: Cross-Site Request Forgery (CSRF)
Concrete CMS before 9.5.3 is vulnerable to Cross-Site Request Forgery CSRF in the theme page-template activation feature. The Dashboard theme Inspect controller's activatefiles action created PageTemplate records from attacker-supplied pageTemplates values without validating an anti-CSRF token.A...
PT-2026-93134
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A use-after-free issue exists in the Auth component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacke...
PT-2026-93127
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A type confusion issue exists in the ServiceWorker component. This occurs when the system incorrectly identifies the data type of an object, which can be leveraged by a remote attacker ...
PT-2026-93149
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A type confusion issue exists in the Compositing component. This occurs when the software fails to correctly identify the data type of an object, potentially allowing a remote attacker ...
PT-2026-93137
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description Code injection in XML allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can interact...
PT-2026-93158
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An uninitialized resource in Skia allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Skia is a 2D graphics library used for rendering text and images...
PT-2026-93143
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An observable discrepancy in CSS allows a remote attacker to leak sensitive information through the use of a crafted HTML page. Recommendations Update Google Chrome to version...
PT-2026-93156
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description Improper input validation in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on top of other graphics APIs, allows a remote attacker to potentially execute arbitrary code...
PT-2026-93133
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A type confusion issue exists in the ServiceWorker component. This allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafte...
PT-2026-93163
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A use after free issue in V8, the open-source high-performance JavaScript and WebAssembly engine, allows a remote attacker to execute arbitrary code within the sandbox by inducing the...
PT-2026-93154
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description A use after free issue in the DOM Document Object Model allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page...
PT-2026-93164
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An integer overflow in the Compositing component allows a remote attacker to obtain cross-origin data by inducing a user to visit a crafted HTML page. Cross-origin data access occurs wh...
PT-2026-93144
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.47 Description An out of bounds read exists in WebGL, which allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. An out of bounds read occurs when a...
PT-2026-93132
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An observable discrepancy in Fonts allows a remote attacker to leak sensitive information. This is achieved by leveraging social engineering to entice a user to visit a crafted HTML pag...
ROS-20260915-73-0151
The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ROS-20260915-73-0166
The vulnerability in Chromium is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
ROS-20260915-73-0010
The vulnerability in Chromium is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...
CVE-2026-91740: Use of Uninitialized Resource
Uninitialized resource in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-91747: Use After Free
Use after free in Skia in Google Chrome prior to 153.0.8010.47 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...