PT-2026-102676

Name of the Vulnerable Software and Affected Versions Mediawiki - DataTransfer Extension versions 1.46.0 through 1.46.x Description The Mediawiki - DataTransfer Extension contains a dependency on a vulnerable third-party component that leads to uncontrolled resource consumption, specifically...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95367): chromium -- security fixes

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-95367: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a co-installed app. Chromium security severity: High...

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:21921-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21921-1 advisory. Changes in chromium: - Chromium 153.0.8010.52 boo1281123: CVE-2026-93374: Use after free in Dawn CVE-2026-93372: Buffer overflow in WebGL...

SUSE CVE-2026-95367

Information leak in DataTransfer in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2026-95367

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in DataTransfer. CVE-2026-95367 Note that Nessus relies on the presence of the package as reported by the vendor. %NASLMINLEVEL 80900 C Tenable...

CVE-2026-93376

A flaw was found in chromium-browser. A local attacker, by leveraging social engineering, could exploit an out-of-bounds read vulnerability within the DataTransfer component. This could allow the attacker to read sensitive memory outside of the browser's security sandbox, potentially leading to...

Linux Distros Unpatched Vulnerability : CVE-2026-93376

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the...

CVE-2026-93376

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

DEBIAN-CVE-2026-93376

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-93376

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-93376

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-93376

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

EUVD-2026-82487

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-93376

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

CVE-2026-93376

Google Chrome versions prior to 153.0.8010.52 are vulnerable to an out of bounds read in the DataTransfer component. A local attacker can leverage social engineering to use a local program to read memory outside the sandbox. This vulnerability has been addressed in several distributions, includin...

CVE-2026-93376: Out-of-bounds Read

Out of bounds read in DataTransfer in Google Chrome prior to 153.0.8010.52 allowed a local attacker leveraging social engineering to read memory outside the sandbox via a local program. Chromium security severity: Medium...

Chromium CVE-2026-87594: Incorrect authorization in DataTransfer

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-87582: Confused deputy in DataTransfer

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...