CVE-2026-106617

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-105898

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue requires user interaction in that a...

CVE-2026-105994

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user...

CVE-2026-105901

ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. A low-privileged attacker could exploit this vulnerability to execute arbitrary code. Exploitation of this issue does not require user interaction...

CVE-2026-110144

Google Chrome on Windows experienced an incorrect authorization flaw in the Mojo component. This vulnerability allowed a local attacker to potentially execute arbitrary code outside the sandbox using a local program. The issue was addressed in version 155.0.8059.79 for Windows and Mac, and 155.0....

CVE-2026-110144

Incorrect authorization in Mojo in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: High...

CVE-2026-110160

Google Chrome versions prior to 155.0.8059.79 are vulnerable to a missing authorization flaw in the ReadingMode component. A remote attacker who has already compromised the renderer process and used social engineering could leverage a crafted HTML page to potentially bypass site isolation . This ...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

Insertion of Sensitive Information Into Sent Data

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information Into Sent Data via the SocketsHttpHandler process. An attacker can obtain sensitive proxy credentials by causing an HTTP redirect that results in the Proxy-Authorization header being sent to an...

GHSA-WXXW-5CVC-53J7 Microsoft Security Advisory CVE-2026-66822 - .NET and Visual Studio Information Disclosure Vulnerability

Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in System.Net.Http. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. SocketsHttpHandler can retain a...