CVE-2026-8522

CVE-2026-8522 affects Google Chrome on macOS, with a use-after-free in the Downloads component allowing remote code execution via a crafted HTML page. Vulnerable when running versions prior to 148.0.7778.168; impact is arbitrary code execution with high/critical severity per Chromium, with networ...

CVE-2026-5897

CVE-2026-5897 affects Google Chrome/Chromium before version 147.0.7727.55, where an incorrect security UI in Downloads could enable UI spoofing via a crafted HTML page if the user performed specific UI gestures. Connected reports show Chromium/Chromium-based Chrome updates across multiple distros...

Chromium: CVE-2026-3937 Incorrect security UI in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

EUVD-2023-44628

Malicious code in bioql PyPI...

EUVD-2022-1942

Malicious code in bioql PyPI...

CVE-2025-54787

CVE-2025-54787 affects SuiteCRM 7.14.6. There is a vulnerability that allows unauthenticated downloads of files from the upload directory when the file is named by an ID (e.g., attachments). An unauthenticated attacker could download internal files by discovering a valid file-ID, with IDs often b...

CVE-2023-2334 Easy Digital Downloads Google Sheet Connector < 1.6.6 - Access Code Update via CSRF

The edd-google-sheet-connector-pro WordPress plugin before 1.4, Easy Digital Downloads Google Sheet Connector WordPress plugin before 1.6.6 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a...

OPENSUSE-SU-2023:0368-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 119.0.6045.123 boo1216978 CVE-2023-5996: Use after free in WebAudio Chromium 119.0.6045.105 boo1216783 CVE-2023-5480: Inappropriate implementation in Payments CVE-2023-5482: Insufficient data validation in USB CVE-2023-5849: Integer...

DEBIAN-CVE-2023-5850

Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted domain name. Chromium security severity: Medium...

DEBIAN-CVE-2021-21229

Incorrect security UI in downloads in Google Chrome on Android prior to 90.0.4430.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page...