CVE-2026-106307

Incorrect authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93730

Missing authorization in FedCM in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93702

Missing authorization in FileSystem in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93694

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106397

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106196

Google Chrome on iOS versions prior to 155.0.8059.39 is vulnerable to a missing authorization flaw in the Navigation component. A remote attacker can exploit this by using a crafted HTML page to bypass the web origin policy , potentially gaining access to a privileged page . The vulnerability is ...

CVE-2026-106407

Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93692

Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106389

Google Chrome versions prior to 155.0.8059.39 are vulnerable to incorrect authorization within the USB component. A remote attacker can leverage social engineering and a crafted Chrome extension to bypass system access restrictions. The vulnerability has a Chromium security severity of Medium . R...

EUVD-2026-93691

Incorrect authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...

EUVD-2026-93684

Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106363

Missing authorization in FullScreen in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106324

Google Chrome on Android versions prior to 155.0.8059.39 is vulnerable to incorrect authorization within the WebAppInstalls component. A remote attacker can exploit this flaw by serving a crafted HTML page to bypass system access restrictions. The vulnerability has a Medium security severity. Whi...

CVE-2026-106324

Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93799

Incorrect authorization in Core in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

CVE-2026-106327

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in Core . This vulnerability allows a remote attacker who has already compromised the renderer process to bypass system access restrictions by utilizing a crafted HTML page . The Chromium security seve...

Kibana 8.19.22, 9.4.7, 9.5.4 Security Update (ESA-2026-187)

Authorization Bypass Through User-Controlled Key in Kibana Leading to Cross-Tenant Data Interception Authorization Bypass Through User-Controlled Key CWE-639 in Kibana could lead to cross-tenant data interception. In this context, "tenant" refers to a user or team sharing the same Kibana...

CVE-2025-2995

CVE-2025-29927 प्राधिकरण बाइपास पुनरुत्पादन यह रिपॉजिटरी next पैकेज में CVE-2025-29927 भेद्यता का पुनरुत्पादन है। पुनरुत्पादन कैसे करें 1. नीचे दिए गए चरणों का पालन करके Next.js एप्लिकेशन को क्लोन करें और चलाएं 2. परीक्षण करें कि प्राधिकरण /api/hello एंडपॉइंट तक पहुंच से इनकार करता है $ curl...

POC_CVE-2026-46716

CVE-2026-46716 — Nezha Monitoring Cross-Tenant RCE via Cron API Authorization Bypass Nezha Monitoring में CVE-2026-46716 को पुनरुत्पादित और पहचानने के लिए एक प्रयोगशाला वातावरण, यह एक गंभीर भेद्यता है जहां POST /api/v1/cron एंडपॉइंट में व्यवस्थापक विशेषाधिकार जाँच का अभाव है, जिससे RoleMember...

CVE-2025-29927

CVE-2025-29927 - تجاوز صلاحية الوسيطة Middleware في Next.js إثبات المفهوم هذا إثبات مفهوم بأسلوب مسابقة التقاط العلم CTF للثغرة تجاوز صلاحية الوسيطة في Next.js CVE-2025-29927. الهدف هو تجاوز صلاحية الوسيطة auth middleware واسترجاع العلم من المسار /protected. ملخص الثغرة CVE : CVE-2025-29927 النوع...