CVE-2026-79192

Improper input validation in Variations in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass web origin policy via crafted network traffic. Chromium security severity: Medium...

PT-2026-81752

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Variations allows a remote attacker to potentially bypass the web origin policy through crafted network traffic. The web origin policy is a security mechani...

Chromium: CVE-2026-17774 Insufficient validation of untrusted input in Variations

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2026-17774

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17774

An insufficient validation of untrusted input flaw was found in the Variations component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513323066...

DEBIAN-CVE-2026-17774

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17774

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17774

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17774

Google Chrome versions prior to 151.0.7922.72 are vulnerable to a heap corruption issue caused by insufficient validation of untrusted input in Variations . An attacker positioned in a privileged network environment can exploit this by sending malicious network traffic. The Chromium security seve...

CVE-2026-17774

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17774

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...

EUVD-2026-50723

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...

CVE-2026-17774

Insufficient validation of untrusted input in Variations in Google Chrome prior to 151.0.7922.72 allowed an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Chromium security severity: Medium...

PT-2026-66093

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description Insufficient validation of untrusted input in Variations allows an attacker in a privileged network position to potentially exploit heap corruption via malicious network traffic. Heap...

ROS-20260609-73-0037

The vulnerability in Thunderbird is related to a behavior that varies depending on the type of implementation. Exploiting this vulnerability allows an attacker who operates remotely to compromise the confidentiality, integrity, and accessibility of the protected information...

CVE-2026-45364

The CVE-2026-45364 issue affects Better Auth (TypeScript) where the HTTP rate limiter keyed by the leftmost x-forwarded-for value could be bypassed for IPv6. Before fixes, IPv6 prefix rotation (e.g., /64) and multiple textual representations could produce 2^64 distinct keys, letting an attacker p...

PT-2026-114663

Уязвимость компонента Variations веб-браузеров Google Chrome и Microsoft Edge связана с недостаточной проверкой вводимых защищаемой информации. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить доступ к защищаемой информации...

Mass FortiGate Symlink Bypass Scanner

FortiGate mass symlink bypass scanner that adds structured validation, impact assessment, and reporting logic. It first verifies whether the target actually appears to be a FortiGate device from Fortinet using fingerprinting heuristics, which reduces false positives. Instead of testing a single...

Authentication Scheme Parsing Bypass

org.keycloak, keycloak-parent is vulnerable to Authentication Scheme Parsing Bypass. The vulnerability is due to an overly permissive Authorization header parser that accepts non-standard separators such as tabs and improper case variations for the “Bearer” scheme, which allows an attacker to...

CVE-2025-23829

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in codingkart Woo Update Variations In Cart woo-update-variations-in-cart allows Stored XSS.This issue affects Woo Update Variations In Cart: from n/a through = 0.0.9...