CVE-2026-121216

An ui misrepresentation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/568999538...

CVE-2026-118314

An improper input validation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/574803484 Mitigation --- CME Mitigation Guidance 2026-11-03 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...

CVE-2026-118309

An improper input validation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/576133777 Mitigation --- CME Mitigation Guidance 2026-11-03 --- Disclaimer: The following mitigation solutions are provided as a courtesy, pending the...

element-two-test (0.0.4), openim-web (>=1.0.3, <=1.0.16) +2 more potentially affected by CVE-2026-118256 via vue-i18n (>=12.0.0-alpha.2, <=12.0.0-alpha.3)

vue-i18n NPM version =12.0.0-alpha.2, =1.0.3, =0.0.5, =0.1.1, =0.1.8 Source cves: CVE-2026-118256 Source advisory: MEND:CVE-2026-118256...

Google Chrome Microsoft Edge UI Component DoS

The UI component vulnerability in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected data, as well as cause a denial-of-service condition via a...

CVE-2026-113173

A flaw was found in Google Chrome. This vulnerability allows a remote attacker to execute arbitrary code within the sandbox an isolated security environment by convincing a user to visit a crafted HTML page. The issue is caused by improper input validation in the user interface UI component...

Oracle Siebel CRM End User Permission Authorization and Access Control Vulnerabilities

Oracle Siebel CRM End User versions 17.0 to 26.9 have vulnerabilities related to permission licensing and access control. These vulnerabilities stem from issues with the UIF Open UI component. As a result, unauthorized attackers may gain access through the HTTP network, leading to unauthorized...

CVE-2026-106372

An incorrect authorization flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/557288890...

CVE-2026-106337

An ui misrepresentation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553145497...

CVE-2026-106368

An ui misrepresentation flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553252261...

Chromium CVE-2026-87559: UI misrepresentation in UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

GHSA-2WJ8-M6PJ-6V7X vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-79245

A flaw was found in chromium-browser. This use-after-free vulnerability in the user interface UI component allows a local attacker, who has already compromised the renderer process, to execute arbitrary code outside of the sandbox environment. This could lead to a complete compromise of the...

CVE-2026-61398 Apache CloudStack: Cross-Site Scripting (XSS) Vulnerability in Instance Reset Password Function in UI

Improper Encoding or Escaping of Output vulnerability in Apache CloudStack's UI while using Instance Reset Password functionality. This issue affects Apache CloudStack: from 4.15.1.0 through 4.20.3.0 and from 4.21.0.0 through 4.22.1.0. Users are recommended to upgrade to version 4.20.3.1 or...

CVE-2026-19177 Insufficient validation of untrusted input in UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Widget Component DoS

The vulnerability of the Widget component: The Firefox web browser and Thunderbird email client have a vulnerability related to an incorrect limitation on the visible layers of the user interface. Exploiting this vulnerability could allow an attacker to cause service failures...

GHSA-48HR-524C-V5W3 Nuxt: Unauthorized Component Instantiation via Server Island Props

Impact Nuxt server islands accept props via the /nuxtisland/ endpoint. When an application has a server island component that forwards props directly into Vue's dynamic component resolution , resolveDynamicComponent, or h, an attacker can pass a plain string value rather than a component definiti...

Malicious code in dolyame-ui-footer (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3ebf602f046406a056b2d9d36768cf4592ae2f8a02375b0fdb5212c3cc1e80ca On require of dolyame-ui-footer, index.js loads./runtime.js which selects a per-OS payload path, fetches a binary via HTTPS from one of three hardcod...

CVE-2026-14337

Pega Platform versions 23.1.0 through 25.1.3 are affected by an Stored Cross-site scripting XSS vulnerability in a user interface component. Requires a high privileged user with a developer role...

CVE-2026-14337

CVE-2026-14337 affects Pega Platform versions 23.1.0 through 25.1.3, where a stored Cross-site Scripting (XSS) vulnerability exists in a user interface component. The flaw requires a high-privilege developer user and is described with a CVSS 4.0 base score of 4.6 (Medium). The provided data does ...