EUVD-2026-107648

In Splunk SOAR versions below 8.7.0, a user that holds a role with the installapps capability could store attacker-controlled content that Splunk SOAR displays in app documentation by installing an app. If another user who holds a role with permission to view apps opens the app documentation,...

EUVD-2025-211173

A reflected cross-site scripting XSS vulnerability in localstack v4.9.2 allows attackers to execute arbitrary Javascript in the context of the user's browser via a crafted URL...

CVE-2026-76303 Stored Cross-Site Scripting (XSS) through App Documentation in Splunk SOAR

In Splunk SOAR versions below 8.7.0, a user that holds a role with the installapps capability could store attacker-controlled content that Splunk SOAR displays in app documentation by installing an app. If another user who holds a role with permission to view apps opens the app documentation,...

CVE-2026-76303

In Splunk SOAR versions below 8.7.0 , a Stored Cross-Site Scripting (XSS) vulnerability exists because the application fails to sanitize app documentation content. An attacker with the install_apps capability can install an app containing malicious content. If a user with permission to view apps ...

CVE-2026-113326

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by enticing a user to load a specially crafted HTML page, triggering memory corruption. This issue allows the attacker to read memory within the browser's restricted sandbox environment, potentially leading t...

CVE-2026-113333

A flaw was found in the Extensions component of chromium-browser. A remote attacker could exploit this vulnerability by enticing a user to view a specially crafted HTML page, triggering memory corruption. This issue allows the attacker to read memory contents within the sandbox environment, leadi...

CVE-2026-113296

A flaw was found in chromium-browser. A remote attacker could exploit a memory corruption vulnerability in the Actor component by convincing a user to open a specially crafted HTML page. Successful exploitation allows the attacker to read memory within the sandbox an isolated security environment...

CVE-2026-113304

A flaw was found in chromium-browser. A memory corruption vulnerability in the Graphics Processing Unit GPU component can lead to information disclosure. A remote attacker could exploit this flaw by convincing a user to visit a specially crafted HTML page, potentially allowing the attacker to rea...

CVE-2026-113322

A flaw was found in chromium-browser. This memory corruption vulnerability in the Dawn graphics component can result in information disclosure. A remote attacker can exploit this flaw by enticing a user to view a specially crafted HTML page. Successful exploitation allows the attacker to read...

CVE-2026-113225

A flaw was found in chromium-browser. This vulnerability allows a remote attacker to cause information disclosure by triggering memory corruption through a specially crafted HTML page. By convincing a user to open the malicious page, an attacker can read memory contents within the browser's...

CVE-2026-113209

A flaw was found in the Navigation component of Google Chrome. A remote attacker can exploit a memory corruption vulnerability by convincing a user to open a specially crafted HTML page, leading to information disclosure. A successful attack enables the adversary to read sensitive memory contents...

CVE-2026-113142

A flaw was found in the Extensions component of Chromium. This vulnerability allows a remote attacker to cause information disclosure by reading process memory inside the browser sandbox. To exploit the flaw, an attacker must convince a user to load a specially crafted HTML page, triggering memor...

CVE-2026-113193

A flaw was found in chromium-browser. This flaw leads to information disclosure due to a memory corruption issue in the V8 JavaScript engine. A remote attacker can exploit this vulnerability by enticing a user to view a specially crafted HTML page. Successful exploitation allows the attacker to...

CVE-2026-113196

A flaw was found in chromium-browser. This vulnerability allows information disclosure by enabling a remote attacker to bypass the web origin policy, which normally prevents scripts on one website from accessing data on another. By convincing a user to open a specially crafted HTML page, an...

CVE-2026-113237

A flaw was found in chromium-browser. A memory corruption vulnerability in the Chromoting component allows a remote attacker to read memory from within the browser sandbox an isolated execution environment via a crafted HTML page. Successful exploitation results in unauthorized information...

CVE-2026-113223

A flaw was found in the DevTools component of chromium-browser. A remote attacker could exploit this memory corruption vulnerability by tricking a user into loading a specially crafted HTML page. Successful exploitation could allow the attacker to read memory within the sandbox environment,...

CVE-2026-113178

A flaw was found in chromium-browser. A memory corruption vulnerability in the Views component allows a remote attacker to cause information disclosure by convincing a user to open a specially crafted HTML page. Successful exploitation enables the attacker to read process memory from within the...

CVE-2026-113343

A flaw was found in chromium-browser. A memory corruption vulnerability exists within the browser sandbox, an isolated security environment designed to contain untrusted processes. A remote attacker could exploit this flaw by enticing a user to load a crafted HTML page, leading to arbitrary code...

CVE-2026-113342

A flaw was found in chromium-browser. A remote attacker can exploit a memory corruption issue in the Network component by tricking a user into visiting a crafted HTML page. Successful exploitation allows the attacker to bypass the security sandbox an isolated execution environment and execute...

CVE-2026-113335

A flaw was found in the Extensions component of chromium-browser. This memory corruption issue allows a remote attacker to execute arbitrary code inside the browser's restricted security environment sandbox. To exploit this vulnerability, an attacker must trick a user into visiting a specially...