CVE-2026-82871: Missing Authorization

ToolJet before v3.16.208 fails to validate organization membership in database read routes, allowing any authenticated user to access other organizations' table schemas and row data. Attackers can supply arbitrary organization IDs in URL parameters to list tables, retrieve column definitions, and...

Amazon Linux 2023 : java-11-amazon-corretto, java-11-amazon-corretto-devel, java-11-amazon-corretto-headless (ALAS2023-2026-2099)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-2099 advisory. Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Ja...

The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Password Manager components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Password Manager components in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data through a specially create...

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge web browsers allows a perpetrator to access confidential data.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

The vulnerability of the Skia component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Web Share component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the Web Share component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of the Keyboard component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and influence data integrity.

The vulnerability of the Keyboard component in Google Chrome and Microsoft Edge is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and affect the integrity of data throu...

The vulnerability of the Media component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data and compromise data integrity.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...

The vulnerability of XML components in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of XML components in Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created XML file...

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge web browsers allows attackers to access confidential data.

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the connection. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

The vulnerability of the Forms component in Google Chrome and Microsoft Edge web browsers allows attackers to access sensitive data and influence data integrity.

The vulnerability of the Forms component in Google Chrome and Microsoft Edge browsers is related to improper protection against attacks via external physical channels. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and influence the integrity of data...

The vulnerability of the FoldableAPIs component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the FoldableAPIs component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to access confidential data through a specially created HTML page...

The vulnerability of the DataTransfer component in Google Chrome and Microsoft Edge web browsers allows a hacker to gain access to confidential data.

The vulnerability of the DataTransfer component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...