burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

CVE-2026-93372

A flaw was found in chromium-browser. A remote attacker can achieve arbitrary code execution outside the browser's security sandbox due to a buffer overflow in the Web Graphics Library WebGL component. An attacker can exploit this vulnerability by enticing a user to visit a specially crafted web...

CVE-2026-106417

A flaw was found in chromium-browser. An integer overflow within the Media component allows a remote attacker to potentially execute arbitrary code outside the browser sandbox. A remote attacker could exploit this vulnerability by tricking a user into opening a specially crafted HTML page...

CVE-2026-106380

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by convincing a user to view a specially crafted HTML page. This issue allows the attacker to spoof user interface UI elements, which may mislead users into trusting malicious content or performing unintended...

CVE-2026-106287

A flaw was found in chromium-browser. An issue in the handling of Cross-Origin Resource Sharing CORS, a mechanism that controls how web applications access resources across different domains, allows a remote attacker to bypass web origin security policies via crafted network traffic. This...

CVE-2026-106386

A flaw was found in the WebAudio component of chromium-browser. An uninitialized resource allows a remote attacker to cause information disclosure by convincing a user to visit a specially crafted HTML page. Successful exploitation enables the attacker to read process memory inside the browser...

CVE-2026-106401

A flaw was found in the Media component of chromium-browser. An out-of-bounds write vulnerability allows a remote attacker to achieve arbitrary code execution outside the browser sandbox by tricking a user into visiting a specially crafted HTML HyperText Markup Language page. Successful...

CVE-2026-106375

A flaw was found in chromium-browser. This flaw allows a remote attacker to execute arbitrary code outside the browser's isolated security environment sandbox by convincing a user to visit a crafted HTML page. The vulnerability is caused by an incomplete cleanup of resources within the Dawn...

CVE-2026-106388

A flaw was found in chromium-browser. A missing authorization check in the DataTransfer component allows a remote attacker who has compromised the renderer process to obtain sensitive information. By tricking a user into loading a specially crafted HTML page, the attacker can bypass restrictions ...

CVE-2026-106336

A flaw was found in chromium-browser. An observable discrepancy in the Paint component allows a remote attacker to cause unauthorized information disclosure. By tricking a user into visiting a specially crafted HTML page, an attacker can exploit rendering differences to leak sensitive data across...

CVE-2026-106232

A flaw was found in chromium-browser. A remote attacker could exploit this vulnerability by convincing a user to visit a crafted HTML page to spoof user interface UI elements. This misrepresentation could deceive users into trusting malicious content or performing unintended actions...

CVE-2026-106244

A flaw was found in chromium-browser. An incorrect authorization issue within the permissions subsystem allows a remote attacker to bypass system access restrictions by transmitting crafted network traffic. This flaw can enable unauthorized access to protected system resources...

CVE-2026-106412

A race condition flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/520755056...

CVE-2026-106339

A flaw was found in the Core component of chromium-browser. A remote attacker who has compromised a browser renderer process could exploit a use of released resource condition by enticing a user to visit a crafted HTML page. Successful exploitation allows the attacker to access cross-origin data...

CVE-2026-106392

A flaw was found in chromium-browser's WebAudio component. A remote attacker could exploit this vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation can result in information disclosure, potentially allowing the attacker to access sensitive cross-orig...

CVE-2026-106416

A flaw was found in chromium-browser. A remote attacker could use social engineering techniques to trick a user into installing a crafted browser extension, resulting in code injection within the extension framework. This vulnerability allows the attacker to spoof user interface UI elements,...

CVE-2026-106331

A flaw was found in chromium-browser. Improper input validation within the Extensions component allows a remote attacker to bypass web origin security policies. By using social engineering to convince a user to install a crafted browser extension, an attacker can gain unauthorized access to...

CVE-2026-106354

A flaw was found in chromium-browser. Due to improper resource exposure in the Extensions subsystem, a remote attacker can access cross-origin data information belonging to different websites by convincing a user to view a crafted HTML page. Successful exploitation leads to unauthorized informati...

CVE-2026-106391

A flaw was found in chromium-browser. An incorrect authorization issue in the WebShare component allows a remote attacker who has compromised the renderer process to spoof user interface UI elements via a crafted HTML HyperText Markup Language page. Successful exploitation enables an attacker to...

CVE-2026-106301

A flaw was found in the Contextual Tasks component of chromium-browser. This flaw allows a remote attacker who has already compromised the renderer process to bypass access restrictions into privileged browser pages. By convincing a user to open a crafted HTML page, the attacker exploits a confus...