CVE-2026-15768

Insufficient policy enforcement in HTML-in-Canvas in Google Chrome prior to 150.0.7871.125 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: High...

PT-2026-58731

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.125 Description Insufficient policy enforcement in the HTML-in-Canvas feature allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or...

EUVD-2025-29237

Malicious code in bioql PyPI...

The vulnerability of the TransferFromImageBitmap method in Thunderbird email clients and Firefox and Firefox ESR browsers relates to the ability to read canvas elements, ignoring security policies that would prevent unauthorized access to information.

The vulnerability of the TransferFromImageBitmap method in Thunderbird email clients and Firefox and Firefox ESR browsers is related to the ability to read canvas elements, while ignoring security policies. Exploiting this vulnerability can allow an attacker who operates remotely to gain...

Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images

A same-origin policy violation occurs allowing the theft of cross-origin images through a combination of SVG filters and a canvas element due to an error in how same-origin policy is applied to cached image content. The resulting same-origin policy violation could allow for data theft. This...

mozilla: Cross-origin theft of images with ImageBitmapRenderingContext

Cross-origin images can be read from a canvas element in violation of the same-origin policy using the transferFromImageBitmap method. Note: This only affects Firefox 65. Previous versions are unaffected.. This vulnerability affects Firefox 65.0.1...

Immunity Canvas: OPENSSL_KEYLEN

Name| opensslkeylen ---|--- CVE| CVE-2002-0656 Exploit Pack| CANVAS Description| OpenSSL keyarglen Overflow Notes| References: http://www.openssl.org/news/secadv20020730.txt CVE Name: CVE-2002-0656 VENDOR: OpenSSL Repeatability: Multiple WARNING: On busy webservers it might require couple of...