Google Chrome Edge CSS Data Tampering

The CSS component vulnerability in Google Chrome and Microsoft Edge is related to improper handling of web page structure. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially crafted HTML page...

Google Chrome Edge CSS Data Tampering

The CSS component vulnerability in Google Chrome and Microsoft Edge is related to improper handling of web page structure. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially crafted HTML page...

CSS Component Access Sensitive Data

The CSS component vulnerability in Google Chrome and Microsoft Edge web browsers is related to information disclosure. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

CSS Component Data Compromise

The CSS component vulnerability in Google Chrome and Microsoft Edge is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

CSS Component Access Sensitive Data

The CSS component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data by using a specially crafted HTML page...

OPENSUSE-SU-2026:20332-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 145.0.7632.159 boo1259213 CVE-2026-3536: Integer overflow in ANGLE CVE-2026-3537: Object lifecycle issue in PowerVR CVE-2026-3538: Integer overflow in Skia CVE-2026-3539: Object lifecycle issue in DevTools...

CSS components Confidential Data Compromise

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and influence the integrity of data through a...

CSS components Confidential Data Access

The vulnerability of the CSS components in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

CSS components Confidential Data Access

The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

CSS components Confidential Data Access

The vulnerability of the CSS components in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

CSS components Confidential Data Access

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

CSS Component DoS

The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

[SECURITY] [DLA 4760-1] roundcube security update

Debian LTS Advisory DLA-4760-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin August 29, 2026 https://wiki.debian.org/LTS Package : roundcube Version : 1.4.15+dfsg.1-1+deb11u11 1.6.5+dfsg-1+deb12u11 CVE ID : CVE-2026-74997 CVE-2026-74998 CVE-2026-74999...

EUVD-2026-43003

Snipe-IT has CSS Injection via headercolor Setting...

GHSA-W7QW-5WFV-GWX9 Snipe-IT has CSS Injection via `header_color` Setting

Impact Because default.blade.php is the base layout loaded on every authenticated page, all active user sessions are affected immediately upon the next page load after the payload is saved. An attacker who has compromised an admin account or who is a malicious insider can use this to silently...

Snipe-IT has CSS Injection via `header_color` Setting

Impact Because default.blade.php is the base layout loaded on every authenticated page, all active user sessions are affected immediately upon the next page load after the payload is saved. An attacker who has compromised an admin account or who is a malicious insider can use this to silently...

Chromium: CVE-2026-79291 Information leak in CSS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-79234 Injection in CSS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-79770

A flaw was found in Nokogiri. A remote attacker can inject specially crafted CSS selectors into methods such as Nodecss or Nodeatcss. This injection can lead to regular expression denial of service ReDoS due to exponential regex backtracking, causing the application to become unresponsive...

WordPress Nexter Blocks plugin < 5.0.2 - Contributor+ Stored CSS Injection vulnerability

Contributor+ Stored CSS Injection vulnerability discovered by Vaibhav Narkhede in WordPress Plugin Nexter Blocks versions 5.0.2...