CVE-2026-106398

Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93758

Incorrect authorization in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106398

Google Chrome versions prior to 155.0.8059.39 are vulnerable to an incorrect authorization flaw in the Media component. This vulnerability allows a remote attacker to leak cross-origin data by tricking a user into visiting a crafted HTML page. The impact is categorized as a medium security severi...

CVE-2026-106336

Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93747

Observable discrepancy in Paint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106336

An observable discrepancy in the Paint component of Google Chrome prior to version 155.0.8059.39 allows a remote attacker to leak cross-origin data by hosting a crafted HTML page. The vulnerability is classified with a Medium security severity. Remediation is available in version 155.0.8059.39 an...

CVE-2026-106213

Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93740

Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106213

Race condition in WebAudio in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106213

A race condition in the WebAudio component of Google Chrome (versions prior to 155.0.8059.39 ) allows a remote attacker to potentially leak cross-origin data through a crafted HTML page. The vulnerability is classified with a Medium security severity. No specific exploit details or remediation in...

CVE-2026-106217

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106217

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

EUVD-2026-93681

Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-106217

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw within Google Lens . A remote attacker who has already compromised the renderer process can leverage this issue to leak cross-origin data by serving a crafted HTML page. This vulnerability carries a Chrom...

CVE-2026-27886

CVE-2026-27886 Strapi PoC For authorized security testing only. Strapi leaking sensitive data via relational filtering due to lack of query sanitization. Includes: CVE-2026-27886.py - Python PoC CVE-2026-27886.yaml - Nuclei template for detection What it checks The checker sends two requests to a...

PT-2026-107070

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the Media component allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page, by using a...

PT-2026-106933

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in DevTools allows a remote attacker to leak cross-origin data through the use of a crafted HTML page and social engineering. Recommendations Update Google Chrom...

PT-2026-106888

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A race condition in WebAudio allows a remote attacker to potentially leak cross-origin data through the use of a crafted HTML page. A race condition occurs when the timing or order of...

CVE-2026-106394: Incomplete Cleanup

Incomplete cleanup in Glic in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-59782

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The JavaScript preprocessing Duktape engine on Zabbix server has a vulnerability where a limited administrator is able to read raw heap data potentially resulti...