CVE-2026-102300

A vulnerability in the WebGPU component of Google Chrome (prior to version 154.0.8037.92 ) stems from an uninitialized resource flaw. This condition allows a remote attacker to obtain cross-origin data by tricking a user into visiting a crafted HTML page . No specific exploit links or alternative...

CVE-2026-102303

Uninitialized resource in GPU in Google Chrome on on Android prior to 154.0.8037.92 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

Security Bulletin: IBM InfoSphere Optim Archive Viewer is affected by an information disclosure vulnerability in urllib3 (CVE-2026-44431)

Summary An information disclosure vulnerability in the urllib3 HTTP client library CVE-2026-44431 used by IBM InfoSphere Optim Archive Viewer has been addressed by upgrading the component to version 2.7.0. Vulnerability Details CVEID:CVE-2026-44431 DESCRIPTION: urllib3 is an HTTP client library f...

CVE-2026-95285

A flaw was found in chromium-browser. Due to missing authorization checks in the WebView component, a remote attacker who has already compromised a renderer process can bypass the browser's web origin policy by convincing a user to load a crafted HTML page. Successful exploitation could allow the...

CVE-2026-95340

A flaw was found in the Picture-in-Picture component of chromium-browser. An incorrect authorization issue allows a remote attacker to bypass the web origin policy—the security boundary that isolates data between different websites—by convincing a user to interact with a crafted HTML page...

CVE-2026-95312

A flaw was found in chromium-browser. A remote attacker who has compromised the browser's renderer process could exploit this vulnerability by convincing a user to visit a crafted HTML page. Successful exploitation allows the attacker to bypass cross-origin security boundaries and access sensitiv...

CVE-2026-95302

A flaw was found in chromium-browser. An incorrect authorization issue within the WebAPK Web Android Package implementation allows a local attacker to bypass security boundaries using a co-installed application. A malicious application installed on the same device can exploit this vulnerability t...

CVE-2026-95352

A flaw was found in chromium-browser. An incorrect authorization issue in DevTools allows a remote attacker to bypass the web origin policy by using social engineering to convince a user to install a crafted browser extension. Successful exploitation could allow the attacker to access sensitive...

DEBIAN-CVE-2026-95368

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95368

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-95312

Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-95317

Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-95317

Incorrect authorization in MediaCapture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...

CVE-2026-95312

Information leak in Passwords in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

DEBIAN-CVE-2026-95302

Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-95302

Incorrect authorization in WebAPKs in Google Chrome on on Android prior to 154.0.8037.57 allowed a local attacker to obtain cross-origin data via a co-installed app. Chromium security severity: Medium...

CVE-2026-95296

Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-95296

Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Low...

DEBIAN-CVE-2026-95289

Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95289

Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...