694 matches found
CVE-2026-109750
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the DOM: Web Authentication component...
Web Authentication DoS
The vulnerability in the Web Authentication component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory usage. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...
Web Authentication Component Compromise
The vulnerability in the Web Authentication component of Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to compromise the integrity of protected information...
Linux Distros Unpatched Vulnerability : CVE-2026-109750
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. CVE-2026-109750 Note that Nessus...
CVE-2026-104198 ZoneMinder failed token handling bypasses web authentication
ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken returns false when a token is malformed or has an invalid signature, but the calle...
CVE-2026-104198 ZoneMinder failed token handling bypasses web authentication
ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken returns false when a token is malformed or has an invalid signature, but the calle...
Astra Linux – Vulnerability in Chromium
The use of after free in Web Authentication in Google Chrome before version 149.0.7827.155 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: Critical...
Astra Linux – vulnerability in Chromium
After free in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Astra Linux – vulnerability in Chromium
Prior to version 151.0.7922.109, using “After Free” in Web Authentication within Google Chrome allowed a remote attacker to potentially perform a sandbox escape by crafting a specially designed HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Inappropriate implementations of WebAuthentication in Google Chrome prior to version 96.0.4664.45 allowed a remote attacker to leak cross-origin data through a crafted HTML page...
Astra Linux – vulnerability in Chromium
Prior to version 153.0.8010.36, using “After Free” in Web Authentication within Google Chrome allowed a remote attacker to execute arbitrary code outside the sandbox via a specially crafted HTML page. Chromium security severity: High...
Astra Linux – vulnerability in Chromium
UI misrepresentation in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...
UBUNTU-CVE-2026-109750
Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...
SUSE CVE-2026-109750
Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...
Google Chrome Microsoft Edge Passkeys Security Keys Data Compromise
The vulnerability in the Web Authentication component Passkeys and Security Keys of Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protect...
Google Chrome Microsoft Edge Web Authentication Passkeys Security Keys Access
The vulnerability in the Web Authentication component Passkeys and Security Keys of Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...
CVE-2026-109750
Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...
CVE-2026-109750
Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...
