278323 matches found
CVE-2026-106229
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a UI misrepresentation flaw within the FileSystem component. This issue allows a remote attacker to bypass system access restrictions by leveraging social engineering through a crafted HTML page . The vulnerability is classified with...
EUVD-2026-93718
Confused deputy in SignIn in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93693
Incorrect authorization in USB in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-106407
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the GetUserMedia function. An attacker who has already compromised the renderer process can use a crafted HTML page to bypass system access restrictions . No specific exploit details or in-the-wild ...
CVE-2026-106244
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw within the permissions subsystem . This vulnerability allows a remote attacker to bypass system access restrictions by transmitting crafted network traffic . Successful exploitation can result in unaut...
EUVD-2026-93690
Improper input validation in Viz in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-93691
Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106185
Google Chrome versions prior to 155.0.8059.39 are vulnerable to improper input validation in Viz . A remote attacker who has already compromised the renderer process can use a crafted HTML page to bypass system access restrictions. The Chromium security severity for this issue is Medium . No spec...
CVE-2026-106363
Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the FullScreen functionality. A remote attacker who has already compromised the renderer process and utilized social engineering can bypass system access restrictions by serving a crafted HTML page. Th...
EUVD-2026-93853
Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-106327
Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in Core . This vulnerability allows a remote attacker who has already compromised the renderer process to bypass system access restrictions by utilizing a crafted HTML page . The Chromium security seve...
EUVD-2026-93791
Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-86362
Dell System Update, versions prior to 2.3.0.0, contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-86362
Dell System Update , versions prior to 2.3.0.0 , contains an Improper Access Control vulnerability (CWE-284). A low-privileged attacker with local access can exploit this flaw to achieve Elevation of Privileges . Documentation indicates that the manufacturer recommends updating to version 2.3.0.0...
EUVD-2026-93790
Dell System Update, versions prior to 2.3.0.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges...
CVE-2026-86361
Dell System Update, versions prior to 2.3.0.0 , contains an Incorrect Permission Assignment for Critical Resource vulnerability (CWE-732 ). A low privileged attacker with local access could potentially exploit this flaw to achieve elevation of privileges . Dell recommends updating the software to...
CVE-2026-56952
In platformmsghandlerinit of defaultmsghandlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
EUVD-2026-93789
In platformmsghandlerinit of defaultmsghandlers.c, there is a possible permission bypass due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2026-56952
A permission bypass vulnerability exists in the platform_msg_handler_init function within default_msg_handlers.c . The flaw is caused by a missing permission check , which could allow for a local escalation of privilege requiring System execution privileges . This vulnerability does not require u...
CVE-2026-55307
In kdnsetsysregsprot of hwcrypto-kdn.c, there is a possible information disclosure due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...