111563 matches found
CVE-2026-106403
An incorrect authorization flaw was found in the Accessibility component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/523601696...
CVE-2026-106391
An incorrect authorization flaw was found in the WebShare component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/522325665...
CVE-2026-106384
A missing authorization flaw was found in the SiteIsolation component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/554348119...
CVE-2026-106297
An incorrect authorization flaw was found in the Scheduling component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513735469...
CVE-2026-106250
A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502497790...
CVE-2026-106191
A missing authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502282293...
CVE-2026-103007
A flaw was found in Elasticsearch. An authorization flaw in delegated role-management permissions allows an authenticated user with delegated administrative access to escalate privileges. Because authorization checks fail to strictly enforce index scoping restrictions, a user with this privilege...
Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware
Research on Vivo iQOO Neo 9 Rooting CVE-2025-21479 This pro...
CVE-2026-106503
Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input authorization bypass. An authenticated user with access to affected Scaffolder templates could bypass...
CVE-2026-106503 Backstage: Scaffolder action input authorization bypass
Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input authorization bypass. An authenticated user with access to affected Scaffolder templates could bypass...
CVE-2026-106503
Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input authorization bypass. An authenticated user with access to affected Scaffolder templates could bypass...
CVE-2026-106503 Backstage: Scaffolder action input authorization bypass
Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input authorization bypass. An authenticated user with access to affected Scaffolder templates could bypass...
CVE-2026-106503 Backstage: Scaffolder action input authorization bypass
Backstage is an open framework for building developer portals. Prior to 3.3.1, 3.4.1, 4.0.3 and 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by scaffolder action input authorization bypass. An authenticated user with access to affected Scaffolder templates could bypass...
CVE-2026-106503
The Backstage framework's @backstage/plugin-scaffolder-backend package is vulnerable to a scaffolder action input authorization bypass in versions prior to 3.3.1, 3.4.1, 4.0.3, and 4.1.0. An authenticated user with access to affected Scaffolder templates can bypass configured action restrictions....
CVE-2026-106463
Backstage is an open framework for building developer portals. Prior to 0.8.7, the @backstage/plugin-catalog-backend-module-gitlab package is affected by improper authorization in gitlab organizational user ingestion. Deployments that enable GitLab organization event ingestion and rely on scoped...
CVE-2026-106489
Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...
CVE-2026-106461
Backstage is an open framework for building developer portals. Prior to 4.1.0, the @backstage/plugin-scaffolder-backend package is affected by incorrect authorization in scaffolder task listing. An authenticated internal user may be able to view metadata for scaffolder tasks outside the visibilit...
CVE-2026-105811
Authorization bypass through a user-controlled key in the optional Amazon Q Business Lambda hook sample q-business-lambda-hook https://github.com/aws-solutions-library-samples/qnabot-on-aws/blob/main/source/docs/lambdahooks/README.md , available with QnABot on AWS versions 7.0.0 through 7.4.5,...
CVE-2026-106489 Backstage: Improper authorization enforcement for TechDocs static content
Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...
CVE-2026-106489 Backstage: Improper authorization enforcement for TechDocs static content
Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper authorization enforcement for techdocs static content. An authenticated user with access to one TechDocs documentation site could craft a URL able ...