CVE-2026-106403

Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106403

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the Accessibility component. This vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass site isolation using a crafted HTML page. The Chromium security ...

ROS-20261006-73-0194

The vulnerability of the scorecvframe function in the Linux operating system is related to a violation of the count of links to pages displayed in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

CVE-2026-106403: Incorrect Authorization

Incorrect authorization in Accessibility in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

PT-2026-107075

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Accessibility component allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site...

Astra Linux – Vulnerability in Chromium

Script injection in accessibility features of Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML through a crafted Chrome Extension. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Accessibility in Google Chrome before version 152.0.7977.65 allowed a remote attacker to leverage social engineering to execute arbitrary code outside the sandbox through UI interaction. Chromium security severity: High...

Astra Linux – Vulnerability found in Linux 5.10, Linux 6.1, and Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: RDMA/rtrs: Ensure that the ‘ibsge list’ is accessible. Move the declaration of the ‘ibsge list’ variable outside the ‘alwaysinvalidate’ block to ensure that it remains accessible for use throughout the function. Previously, th...

ROS-20261005-73-0138

The vulnerability of the f81604readintcallback function in the drivers/crypto/ccp/sev-dev-tsm.c file of the Linux kernel cryptographic accelerator driver relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...

ROS-20261005-73-0025

The vulnerability in rsync is related to unvalidated array indexing. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

MariaDB Privilege Bypass

The vulnerability of the MariaDB database management system is related to the improper assignment of privileges. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...

MariaDB extra/mariabackup/xbstream.cc Buffer Overflow

The vulnerability of the extra/mariabackup/xbstream.cc file of the MariaDB database management system is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

FreeRDP RDP Client Buffer Overflow

The vulnerability of the channels/drdynvc/client/drdynvcmain.c file in the RDP client FreeRDP is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...

Hitachi Energy RTU500 series CMU Authentication Bypass

The vulnerability of the programmable logic controllers Hitachi Energy RTU500 series CMU is related to the absence of authentication for a critical function. Exploiting this vulnerability allows an attacker to compromise the integrity and accessibility of the protected information...

Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools

Google has announced a new security measure that limits access to Android's accessibility services to verified applications classified as Accessibility Tools when Advanced Protection is enabled. With malicious Android applications abusing the API serving as the main conduit for malware and...

Gitea UpdatePullRequest Function Use-After-Free

The vulnerability of the UpdatePullRequest function in the routers/api/v1/repo/pull.go file of the Git repository management system Gitea is related to insufficient resource control during its existence. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and...

CLEANSTART-2024-UI36748 Use after free in Accessibility in Google Chrome prior to 91

Security vulnerability affects the chromium package. Use after free in Accessibility in Google Chrome prior to 91...

CLEANSTART-2024-AL06314 Use after free in Accessibility in Google Chrome prior to 98

Security vulnerability affects the chromium package. Use after free in Accessibility in Google Chrome prior to 98...

CLEANSTART-2024-NZ14344 Use after free in Accessibility in Google Chrome prior to 98

Security vulnerability affects the chromium package. Use after free in Accessibility in Google Chrome prior to 98...

CentOS Linux 7 [TuxCare] Security Update: java-1.8.0-openjdk / java-1.8.0-openjdk-accessibility / etc Multiple Vulnerabilities (CENTOS7:CLSA-2025:1749481242)

The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2025:1749481242 advisory. Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number...