EUVD-2026-52526

Time-of-check time-of-use toctou race condition in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

CVE-2026-66321

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-66314

Time-of-check time-of-use toctou race condition in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...

Oracle Linux 10 : firefox (ELSA-2026-47101)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-47101 advisory. 140.13.0-1.0.1 - Fix firefox-oracle-default-prefs.js for new nss Orabug: 37079773 - Add firefox-oracle-default-prefs.js and remove the corresponding...

CVE-2026-66325

Server-side request forgery ssrf in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...

CVE-2026-66311 Microsoft Edge (Chromium-based) Tampering Vulnerability

...

CVE-2026-66315

Technical details about CVE-2026-66315 are not publicly available in the provided documents. Monitor for updates from the vendors and security advisories to obtain affected products, vulnerable components, impact specifics, and remediations.

CVE-2026-66313

Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...

CVE-2026-66310

Microsoft Edge for Android is affected by CVE-2026-66310, described as external control of a file name or path that allows an unauthorized local attacker to disclose information. The vulnerability is labeled with CVSS v3.1 base score 7.7 (HIGH), with attack vector LOCAL, all else equal; no user i...

CVE-2026-66312 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-66310 Microsoft Edge for Android Information Disclosure Vulnerability

...

MAL-2026-11503 Malicious code in instalogin1234 (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4c7d01985e4b5c4afe1e4aafc0eb9a3d97feb1eacae68ef70adf962846392460 The package presents itself as a 'Modern Instagram CLI' but its login command displays a fake Instagram login prompt that reads a username and passwo...

RLSA-2026:47178 Important: yelp security update

Yelp is the help browser for the GNOME desktop. It is designed to help you browse all the documentation on your system in one central tool, including traditional man pages, info pages and documentation written in DocBook. Security Fixes: yelp: yelp-xsl: Overly Permissive Content Security Policy i...

CVE-2026-66325

creationtimestamp| type| source ---|---|--- 2026-08-03 11:45:39+00:00| seen| https://www.hkcert.org/security-bulletin/microsoft-edge-multiple-vulnerabilities20260803...

firefox: thunderbird: Use-after-free in the WebRTC: Audio/Video component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the WebRTC: Audio/Video component...

Cybozu Garoon vulnerable to cross-site scripting

Overview Scheduler in Cybozu Garoon provided by Cybozu, Inc contains the following vulnerability: Cross-Site Scripting CWE-79 - CVE-2026-57279 CyCDB-4148 Cybozu, Inc reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc coordinated under t...

The vulnerability of the JSON Script Runner component of the cross-platform application for viewing and modifying database data in the DbGate browser allows a perpetrator to execute arbitrary code.

The vulnerability of the JSON Script Runner component in a cross-platform application for browsing and modifying database data in the DbGate browser is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Exploit for CVE-2026-9811

CVE-2026-9811 CVE-2026-9811 is a Stored Cross-Site Scripting...

MAL-2026-11428 Malicious code in wacve-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2e59800b6fa0d3429fb7bccd34b4ae292dc2668919fba704a7b16ddff71071 On import wacveutils, the package's init.py unconditionally invokes checkforupdates, which HTTP-fetches a hardcoded GitHub Gist under the user...

Malicious code in wacve-utils (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4b2e59800b6fa0d3429fb7bccd34b4ae292dc2668919fba704a7b16ddff71071 On import wacveutils, the package's init.py unconditionally invokes checkforupdates, which HTTP-fetches a hardcoded GitHub Gist under the user...