CVE-2026-15037

A flaw was found in Qt XML. This vulnerability, categorized as improper output neutralization, allows an attacker to inject arbitrary XML Extensible Markup Language markup. This occurs because the QDom component, when serializing comments, CDATA Character Data, and processing instructions, does n...

DEBIAN-CVE-2026-15037

Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under th...

EUVD-2026-48254

Improper output neutralization XML injection in QDom comment, CDATA, and processing-instruction serialization in Qt XML from 4.0.0 through 6.11 allows untrusted text serialized by an application into those nodes to inject arbitrary XML markup, because the node terminators are not escaped under th...

Palo Alto Networks Prisma Access Browser 安全漏洞

Palo Alto Networks Prisma Access Browser is an enterprise security browser from Palo Alto Networks, Inc. A security vulnerability exists in Palo Alto Networks Prisma Access Browser that stems from an insufficient cache implementation that could lead to the bypassing of data control policies...

What does ‘consent to tracking’ really mean?

Thanks to Jerome Boursier for contributions. Post GDPR, many social media platforms will ask end users to consent to some form of tracking as a condition of using the service. It's easy to make assumptions as to what that means, especially when the actual terms of service or data policy for the...