CVE-2026-78941

Information leak in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-79186

An incorrect authorization flaw in the Network component of Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had already compromised the renderer process to bypass site isolation via a crafted HTML page. The Chromium project assigned this issue a Medium security severity. Remedi...

CVE-2026-79186

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

RLSA-2026:58899 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL...

RLSA-2026:58897 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL...

firefox security update

An update is available for firefox. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

CVE-2026-56094

TYPO3 extension "Apache Solr for TYPO3 - Enterprise Search" (solr) is affected by an information disclosure vulnerability. The extension's additionalFilters request parameter allows an attacker to register a named siteHash filter before the system's own filter is applied; because the query builde...

firefox security update

An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

RLSA-2026:58898 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics: CanvasWebGL...

RockyLinux 10 : firefox (RLSA-2026:58899)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:58899 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics...

RockyLinux 8 : firefox (RLSA-2026:58898)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:58898 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics:...

RockyLinux 9 : firefox (RLSA-2026:58897)

The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:58897 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the Graphics:...

PT-2026-81647

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in Lighthouse allows a remote attacker who has compromised the renderer process and used social engineering to bypass site isolation through a crafted HTML page...

PT-2026-81751

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in SiteIsolation allows a remote attacker who has compromised the renderer process and used social engineering to bypass site isolation through a crafted HTML...

PT-2026-81746

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Network component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation ...

PT-2026-81628

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper resource exposure in the Preload component allows a remote attacker to bypass site isolation by using a crafted HTML page. Site isolation is a security feature that ensures pag...

PT-2026-81686

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An incorrect reference resolution in the Speech component allows a remote attacker who has already compromised the renderer process to bypass site isolation. This is achieved by using a...

PT-2026-81763

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in DevTools allows a remote attacker who has compromised the renderer process to bypass site isolation through the use of a crafted HTML page. Site isolation i...

PT-2026-81553

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An information leak in the Core component allows a remote attacker who has compromised the renderer process to bypass site isolation. This is achieved by using a crafted HTML page. Site...

PT-2026-81564

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site isolation is a securi...