ROS-20260915-73-0061

The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to perform domain substitution through a created HTML page...

ROS-20260915-73-0063

The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform domain substitution using a created domain name...

CVE-2026-80213

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its range. A label longer than 255 octets had its length stored modulo 256 but the label data was written unchanged, and thus the bytes on t...

CVE-2026-80213

CVE-2026-80213 affects the resolv gem (before 0.7.2 ) for Ruby. The vulnerability resides in Resolv::DNS::MessageEncoder , which wrote a DNS label's length into a single octet without range validation. Labels longer than 255 octets had their length stored modulo 256 while the label data was writt...

CVE-2026-80213

An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS label's length into a single octet without checking its range. A label longer than 255 octets had its length stored modulo 256 but the label data was written unchanged, and thus the bytes on t...

WebUI Domain Substitution

The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform domain substitution using a created domain name...

Tab Hover Cards Component Domain Substitution

The vulnerability of the Tab Hover Cards component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace a domain name using a created domain name...

Tab Strip Control XSS

The vulnerability of the Tab Strip control element in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to perform domain substitution through a created HTML page...

Google Chrome Downloads Domain Substitution

The vulnerability of the Downloads component in the Google Chrome browser is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to perform domain substitution using a specially created HTML page...

AppCache Domain Substitution

The vulnerability of the AppCache mechanism in browsers such as Mozilla Firefox, Firefox ESR, and the email client Thunderbird is related to defects in the Application Cache system’s functionality. Exploiting this vulnerability allows a malicious actor to replace domains using the “FALLBACK”...

Omnibox Domain Substitution

The vulnerability of the Omnibox browser implementation by Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform domain name substitution remotely, using a specially crafted domain name that includes IDN...

Omnibox Domain Substitution

The vulnerability of the Omnibox browser implementation by Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform domain substitution remotely, using a specially created domain name containing the symbol “U+0620”...

Omnibox Google Chrome Domain Replacement

The vulnerability of the Omnibox browser implementation by Google Chrome is related to insufficient compliance with security policies. Exploiting this vulnerability allows a malicious actor to perform domain substitution using a specially crafted domain name, which includes IDN Internationalized...