CVE-2019-5786

CVE-2019-5786 Chrome 72.0.3626.119 estable Exploit FileReader UaF para Windows 7 x86. Este exploit utiliza el aislamiento de sitios para forzar la vulnerabilidad. iframe.html es el script contenedor que carga el exploit, contenido en los otros archivos, repetidamente en un iframe. Aloja iframe.ht...

CVE-2019-0808

CVE-2019-5786 y CVE-2019-0808 Chrome 72.0.3626.119 stable Windows 7 x86 exploit chain. Este exploit utiliza el aislamiento de sitios para realizar fuerza bruta en CVE-2019-5786. host1wrapper/iframe.html es el script envoltorio que carga el exploit repetidamente en un iframe. La cadena real reside...

CVE-2026-84140

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84133

Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84129

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84140

CVE-2026-84140 is a site isolation issue in the DOM: Navigation component of Mozilla Firefox . The vulnerability was fixed in Firefox 155 and Firefox ESR 153.2 . Site isolation issues in Firefox typically involve cross-site information leakage where the DOM Navigation component fails to properly ...

CVE-2026-84140 Site isolation issue in the DOM: Navigation component

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

EUVD-2026-69088

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84133

CVE-2026-84133 is a site isolation vulnerability in the DOM: Push Subscriptions component of Mozilla Firefox . The issue allows cross-site isolation to be bypassed through the Push Subscriptions API, potentially enabling an attacker to gain information or execute actions across site boundaries. T...

CVE-2026-84133 Site isolation issue in the DOM: Push Subscriptions component

Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

EUVD-2026-69081

Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

CVE-2026-84129

CVE-2026-84129 is a site isolation issue in the DOM: Navigation component of Firefox . A site isolation flaw in the Navigation component can allow a compromised website to bypass isolation boundaries and interact with content from another site context. The vulnerability was fixed in Firefox 155 a...

CVE-2026-84129 Site isolation issue in the DOM: Navigation component

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

EUVD-2026-69078

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155, Firefox ESR 153.2, Thunderbird 155, and Thunderbird 153.2...

Trespasser

CVE-2026-74970 · Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...

MiracleLinux 8 : firefox-140.14.0-1.el8_10.ML.1 (AXSA:2026-1703:21)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1703:21 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the...

MiracleLinux 9 : firefox-140.13.0-1.el9_8.ML.1 (AXSA:2026-1698:20)

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1698:20 advisory. libaom: libaom: heap buffer overflow in AV1 encoder first-pass stats buffer via LAP mode CVE-2026-56208 firefox: thunderbird: Site isolation issue i...

CVE-2026-78941

A flaw was found in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an information leak by using a specially crafted HTML page. This vulnerability allows the attacker to bypass site isolation, potentially leading to the disclosure of sensitive information...

CVE-2026-78903

A flaw was found in Google Chrome's Site Isolation feature. This vulnerability, caused by an incomplete cleanup process, could allow a remote attacker to bypass site isolation. To exploit this, the attacker must first compromise the browser's renderer process and then use a specially crafted HTML...

CVE-2026-79186

A flaw was found in Google Chrome's Network component. Incorrect authorization could allow a remote attacker, who has already compromised the renderer process, to bypass site isolation. This bypass is achieved by presenting a specially crafted HTML page, potentially leading to unauthorized access...