Chromium: CVE-2026-11034 Insufficient validation of untrusted input in Tab Group Sync

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-11034

An insufficient validation of untrusted input flaw was found in the Tab Group Sync component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497934980...

SUSE CVE-2026-11034

Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...

EUVD-2026-34483

Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...

DEBIAN-CVE-2026-11034

Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...

CVE-2026-11034

Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...

CVE-2026-11034

Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...

CVE-2026-11034

The CVE-2026-11034 entry affects Google Chrome on Android, specifically the Tab Group Sync feature. The issue is insufficient validation of untrusted input, allowing a remote attacker to inject arbitrary scripts or HTML (UXSS) via malicious network traffic. Affects Chrome versions before 149.0.78...

CVE-2026-11034

Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...

CVE-2026-11034

Insufficient validation of untrusted input in Tab Group Sync in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via malicious network traffic. Chromium security severity: Medium...

PT-2026-46563

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description Insufficient validation of untrusted input in Tab Group Sync allows a remote attacker to inject arbitrary scripts or HTML, leading to Universal Cross-Site Scripting UXSS, via...

Limbas SQL Injection Vulnerability

Limbas is a database framework written in PHP by the German company Limbas. It is used to create database-driven business applications. A SQL injection vulnerability exists in Limbas version 5.2.14, which stems from the fact that incorrect manipulation of the parameter tabgroup can lead to sql...

PT-2024-18303 · Limbas · Limbas

Name of the Vulnerable Software and Affected Versions: Limbas version 5.2.14 Description: A vulnerability was found in an unknown functionality of the file main admin.php. The manipulation of the tab group argument leads to sql injection. The complexity of an attack is rather high, and the...

The vulnerability in the implementation of the “Google Chrome Tab Group” extension allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the “Google Chrome Tab Group” extension relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc.V8 is an open source JavaScript engine. Google Chrome suffers from a resource management error vulnerability that stems from the presence of post-release reuse in the Software tab group...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. A security vulnerability exists in Google Chrome that originates from the presence of post-release reuse in the Software tab group...

The vulnerability of the Tab Group component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of Tab Group components in Google Chrome and Microsoft Edge stems from the operation of processing unreliable HTML content within the data buffer, which allows operations to be performed beyond the allowed limits. Exploiting this vulnerability can enable a remote attacker to...

The vulnerability in the implementation of the “Tabs Group” extension for the Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of the “Google Chrome Tab Group” extension relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to cause a service failure through a specially created HTML page...

openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0742-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability in the implementation of the “Tabs Group” extension for the Google Chrome browser allows a hacker to trigger a service failure.

The vulnerability of the “Google Chrome Tab Group” extension is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...