7919 matches found
CVE-2026-17909
A vulnerability in Google Chrome prior to version 151.0.7922.72 allows a remote attacker to leak cross-origin data via malicious network traffic. The root cause is the insufficient validation of untrusted input within Isolated Web Apps . This issue is classified as Low severity by Chromium securi...
EUVD-2026-50658
Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...
CVE-2026-17909
Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...
CVE-2026-17780
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17780
An inappropriate implementation in Isolated Web Apps in Google Chrome prior to version 151.0.7922.72 allows a remote attacker to bypass navigation restrictions using a crafted HTML page. The Chromium security severity is rated as Medium . No specific exploit links or details are provided in the d...
CVE-2026-17780
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-50729
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17780
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
Linux Distros Unpatched Vulnerability : CVE-2026-17909
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via...
Linux Distros Unpatched Vulnerability : CVE-2026-17780
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a...
PT-2026-66099
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 151.0.7922.72 Description An inappropriate implementation in Isolated Web Apps allows a remote attacker to bypass navigation restrictions by using a crafted HTML page. Recommendations Update Google Chrome to...
The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps for Enterprise, related to the execution of operations outside the buffer in memory, allows an attacker to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, Microsoft SharePoint Enterprise Server, and Microsoft 365 Apps for Enterprise is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to execute...
CVE-2026-17909: Improper Input Validation
Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...
The vulnerability of Microsoft Word, the Microsoft SharePoint Server, Microsoft Office, and Microsoft 365 Apps for Enterprise text editors arises from improper validation of certain input types, allowing attackers to disclose protected information.
The vulnerability of Microsoft SharePoint Server and SharePoint Enterprise Server packages is related to improper validation of the specified type of input data. Exploiting this vulnerability can allow an attacker to disclose protected information...
Vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server packages, related to buffer overflow in the stack, allows attackers to execute arbitrary code.
The vulnerability of Microsoft Excel, Microsoft Office, Microsoft 365 Apps for Enterprise, and Microsoft Office Online Server programs is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2026-17780: Improper Access Control
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-66228
Insufficient validation of untrusted input in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via malicious network traffic. Chromium security severity: Low...
The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, and Microsoft 365 Apps for Enterprise, related to reading data outside of the allowed range in memory, allows attackers to disclose sensitive information.
The vulnerability of Microsoft Office packages, Microsoft SharePoint Server, and Microsoft 365 Apps for Enterprise involves reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
cve-2026-47858 - HIGH - CVE-2026-47858: live information startup mode is vulnerable for remote code execution
Starting Spring Boot applications in the Spring Tools with the live information mode enabled makes the running application vulnerable against JMX-based remote code execution. This affects the live information feature across all environments Eclipse, Visual Studio Code, Theia, Cursor except the...
