burp-dom-scanner

Burp DOM Scanner It's a Burp Suite's extension to allow for recursive crawling and scanning of Single Page Applications. It runs a Chromium browser to scan the webpage for DOM-based XSS. It can also collect all the requests XHR, fetch, websockets, etc issued during the crawling allowing them to b...

CVE-2026-106386

A flaw was found in the WebAudio component of chromium-browser. An uninitialized resource allows a remote attacker to cause information disclosure by convincing a user to visit a specially crafted HTML page. Successful exploitation enables the attacker to read process memory inside the browser...

CVE-2026-106401

A flaw was found in the Media component of chromium-browser. An out-of-bounds write vulnerability allows a remote attacker to achieve arbitrary code execution outside the browser sandbox by tricking a user into visiting a specially crafted HTML HyperText Markup Language page. Successful...

CVE-2026-106244

A flaw was found in chromium-browser. An incorrect authorization issue within the permissions subsystem allows a remote attacker to bypass system access restrictions by transmitting crafted network traffic. This flaw can enable unauthorized access to protected system resources...

CVE-2026-106339

A flaw was found in the Core component of chromium-browser. A remote attacker who has compromised a browser renderer process could exploit a use of released resource condition by enticing a user to visit a crafted HTML page. Successful exploitation allows the attacker to access cross-origin data...

CVE-2026-106392

A flaw was found in chromium-browser's WebAudio component. A remote attacker could exploit this vulnerability by convincing a user to visit a specially crafted HTML page. Successful exploitation can result in information disclosure, potentially allowing the attacker to access sensitive cross-orig...

CVE-2026-106416

A flaw was found in chromium-browser. A remote attacker could use social engineering techniques to trick a user into installing a crafted browser extension, resulting in code injection within the extension framework. This vulnerability allows the attacker to spoof user interface UI elements,...

CVE-2026-106331

A flaw was found in chromium-browser. Improper input validation within the Extensions component allows a remote attacker to bypass web origin security policies. By using social engineering to convince a user to install a crafted browser extension, an attacker can gain unauthorized access to...

CVE-2026-106354

A flaw was found in chromium-browser. Due to improper resource exposure in the Extensions subsystem, a remote attacker can access cross-origin data information belonging to different websites by convincing a user to view a crafted HTML page. Successful exploitation leads to unauthorized informati...

CVE-2026-106391

A flaw was found in chromium-browser. An incorrect authorization issue in the WebShare component allows a remote attacker who has compromised the renderer process to spoof user interface UI elements via a crafted HTML HyperText Markup Language page. Successful exploitation enables an attacker to...

CVE-2026-106301

A flaw was found in the Contextual Tasks component of chromium-browser. This flaw allows a remote attacker who has already compromised the renderer process to bypass access restrictions into privileged browser pages. By convincing a user to open a crafted HTML page, the attacker exploits a confus...

CVE-2026-106359

A flaw was found in chromium-browser. A confused deputy vulnerability in the DeviceBoundSessionCredentials feature allows a remote attacker to trick the browser into misusing its authority. By convincing a user to visit a specially crafted HTML page, the attacker can bypass web origin security...

CVE-2026-106326

A flaw was found in chromium-browser. A local attacker can exploit a confused deputy vulnerability—where the browser is tricked into misusing its higher authority—by leveraging a malicious co-installed application. This allows the attacker to bypass system access controls and gain unauthorized...

CVE-2026-106297

A flaw was found in chromium-browser. An authorization vulnerability within the scheduling mechanism allows a remote attacker to bypass the web origin policy, a security control that prevents websites from accessing data from other sites. By convincing a user to visit a specially crafted HTML pag...

CVE-2026-106275

A flaw was found in chromium-browser. This flaw allows a remote attacker to cause an information disclosure through an uninitialized resource in the Graphics Processing Unit GPU component. By convincing a user to open a specially crafted HTML page, an attacker can read memory outside the browser'...

CVE-2026-106382

An use after free flaw was found in the Chromecast component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/534994449...

CVE-2026-106374

A flaw was found in chromium-browser. A type confusion vulnerability in the V8 JavaScript engine allows a remote attacker to execute arbitrary code inside the browser sandbox by convincing a user to visit a specially crafted HTML page. Successful exploitation compromises the browser process, whic...

CVE-2026-106318

A flaw was found in chromium-browser. A remote attacker could achieve arbitrary code execution within the browser's sandbox environment by tricking a user into visiting a crafted HTML page. This issue is caused by a use-after-free memory flaw in the Media component, where previously released memo...

CVE-2026-106235

A flaw was found in chromium-browser. A use-after-free vulnerability—where memory is accessed after it has been released—exists in the WebAudio component. A remote attacker could exploit this issue by enticing a user to visit a crafted HTML page, potentially leading to arbitrary code execution...

MiracleLinux 8 : webkit2gtk3-2.54.0-1.el8_10.ML.1 (AXSA:2026-1970:09)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2026-1970:09 advisory. chromium-browser: skia: chromium-browser: skia: Inappropriate implementation in Skia CVE-2023-4860 chromium-browser: angle: Out of bounds memory...