CVE-2026-106339

A flaw was found in the Core component of chromium-browser. A remote attacker who has compromised a browser renderer process could exploit a use of released resource condition by enticing a user to visit a crafted HTML page. Successful exploitation allows the attacker to access cross-origin data...

CVE-2022-32308

Cross Site Scripting XSS vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process...

CVE-2022-32308

Cross Site Scripting XSS vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process...

CVE-2022-32308

Cross Site Scripting XSS vulnerability in uBlock Origin extension before 1.41.1 allows remote attackers to run arbitrary code via a spoofed 'MessageSender.url' to the browser renderer process...

PT-2022-21220

Name of the Vulnerable Software and Affected Versions uBlock Origin versions prior to 1.41.1 Description A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via a spoofed MessageSender.url to the browser renderer process. This enables attackers to execute malicious...