Chromium CVE-2026-95294: UI misrepresentation in Browser

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-95307: UI misrepresentation in ExtensionsMenu

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-95305: UI misrepresentation in Chromoting

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-95279: UI misrepresentation in Omnibox

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-95337: UI misrepresentation in Messages

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-95323: UI misrepresentation in Chromium

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-95321: UI misrepresentation in Payments

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-95346: UI misrepresentation in Chromoting

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-95291: UI misrepresentation in SecurityIndicators

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-95309: UI misrepresentation in Mobile

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-79009

A flaw was found in Google Chrome. This user interface UI misrepresentation vulnerability allows a remote attacker, leveraging social engineering, to spoof UI elements. The attacker can achieve this by tricking a user into visiting a specially crafted HTML page. The consequence is that users coul...

CVE-2026-79233

A flaw was found in CustomTabs in Google Chrome on Android. A remote attacker could exploit a user interface UI misrepresentation vulnerability by crafting a malicious HTML page. This could allow the attacker to spoof the address bar, potentially deceiving users about the authenticity of a websit...

CVE-2026-78974

A flaw was found in chromium-browser. This user interface UI misrepresentation vulnerability allows a remote attacker, through social engineering, to bypass system access restrictions by tricking a user into interacting with a specially crafted HTML page. This could lead to unauthorized access to...

CVE-2026-87562

A flaw was found in chromium-browser. A remote attacker could exploit incorrect reference resolution in the Accessibility feature by enticing a user to visit a specially crafted HTML page. This could allow the attacker to potentially spoof user interface UI elements, leading to confusion or...

@htyf-mp/cli (>=0.6.0, <=0.7.6), @htyf-mp/taro-plugin-platform (>=0.6.0, <=0.7.1) +1 more potentially affected by CVE-2026-97724 via react-native-worklets (0.12.1)

react-native-worklets NPM version 0.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on react-native-worklets and may be impacted: - @htyf-mp/cli =0.6.0, =0.6.0, =0.1.5, =0.1.11 Source cves: CVE-2026-97724 Source advisory: MEND:CVE-2026-97724...

OESA-2026-4030 rabbitmq-server security update

RabbitMQ is an implementation of AMQP, the emerging standard for high performance enterprise messaging. The RabbitMQ server is a robust and scalable implementation of an AMQP broker. Security Fixes: RabbitMQ is a multi-protocol messaging and streaming broker. HTTP API did not enforce an HTTP...

PT-2026-99084

Name of the Vulnerable Software and Affected Versions Zammad versions prior to 7.1.2 Description Unsanitized option labels are rendered as raw HTML without escaping in the configuration dialogs of AI Agents within the admin UI. An attacker can inject arbitrary HTML and JavaScript by controlling a...

Linux Distros Unpatched Vulnerability : CVE-2026-67421

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP...

Linux Distros Unpatched Vulnerability : CVE-2026-67237

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RabbitMQ is a messaging and streaming broker. From 4.2.0 until 4.2.8 and 4.3.2, settokenauth/2 inserted a bearer token from the Authorization header or...

CVE-2026-67421: Missing Authorization

RabbitMQ is a messaging and streaming broker. From 3.13.0 until 3.13.19, 4.0.24, 4.1.15, 4.2.10, and 4.3.5, RabbitMQ Management rendered an AMQP authorization-error reason containing an attacker-controlled queue name as HTML when the OAuth management UI was enabled. Exploitation requires an...