Chromium: CVE-2026-19560 Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-19559 Use after free in HTML

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-19558 Use after free in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-19557 Use after free in TabStrip

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-19556 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-72552

A flaw was found in Dub. This server-side request forgery SSRF vulnerability allows an unauthenticated remote attacker to force the server to make HTTP requests to arbitrary internal or external hosts. This can be exploited via the metatags edge endpoint, which processes caller-supplied URLs...

CVE-2026-72970

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-72970 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-72970

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-72970 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

EUVD-2026-58754

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Heap-based buffer overflow in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

Chrome DevTools Technique Enables Authenticated Session Hijacking in Live Windows Browsers

Cybersecurity researchers have detailed a post-exploitation technique that enables the Chrome DevTools Protocol CDP inside a running Google Chrome or Microsoft Edge process on Windows, allowing an operator to access cookies, saved data, and authenticated browser sessions. The technique assumes th...

GO-2026-4772 vulnerabilities

Vulnerabilities for packages: spire-server, k3s, commercial-grafana, kots, envoy-gateway, envoy-gateway-fips, commercial-chainloop-backend, kine, commercial-expanso-edge...

GO-2026-4923 vulnerabilities

Vulnerabilities for packages: consul, vault, rke2-runtime, mattermost, frankenphp-8.5, vault-fips, commercial-expanso-edge, fuse-overlayfs-snapshotter, elastic-agent, commercial-grafana, beats, elastic-agent-fips, rke2-runtime-fips, kine, cloudbeat, datadog-agent, frankenphp-8.4, grafana,...

GO-2026-5028 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, traefik-fips, crossplane-provider-azure-network, istio, crossplane-provider-azure-servicelinker, frankenphp-8.5, kyverno, argo-cd, nerdctl, ingress-nginx-controller-fips, etcd-fips, etcd, crossplane-provider-aws-route53recoverycontrolconfig-fips,...

GO-2026-5030 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, traefik-fips, crossplane-provider-azure-network, istio, crossplane-provider-azure-servicelinker, frankenphp-8.5, kyverno, argo-cd, nerdctl, ingress-nginx-controller-fips, etcd-fips, etcd, crossplane-provider-aws-route53recoverycontrolconfig-fips,...

GO-2026-5027 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, traefik-fips, crossplane-provider-azure-network, istio, crossplane-provider-azure-servicelinker, frankenphp-8.5, kyverno, argo-cd, nerdctl, ingress-nginx-controller-fips, etcd-fips, etcd, crossplane-provider-aws-route53recoverycontrolconfig-fips,...

GO-2026-5029 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, traefik-fips, crossplane-provider-azure-network, istio, crossplane-provider-azure-servicelinker, frankenphp-8.5, kyverno, argo-cd, nerdctl, ingress-nginx-controller-fips, etcd-fips, etcd, crossplane-provider-aws-route53recoverycontrolconfig-fips,...

GO-2026-5025 vulnerabilities

Vulnerabilities for packages: gitlab-rails-ce, traefik-fips, crossplane-provider-azure-network, istio, crossplane-provider-azure-servicelinker, frankenphp-8.5, kyverno, argo-cd, nerdctl, ingress-nginx-controller-fips, etcd-fips, etcd, crossplane-provider-aws-route53recoverycontrolconfig-fips,...