ROS-20260520-73-0016

A vulnerability in the ANGLE library of Google Chrome and Microsoft Edge browsers is related to a buffer overflow in dynamic memory. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service using a specially crafted HTML page...

ROS-20260520-73-0025

A vulnerability in the V8 JavaScript script handler of Google Chrome and Microsoft Edge browsers is related to data type mixing errors. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service using a specially crafted HTML page...

libcrux-ml-dsa: Signature Verification on AVX2 Platforms Mishandles Edge Case

The AVX2 implementation of ML-DSA verification incorrectly implemented the usehint function, mishandling an edge case that should lead to signature rejection. Impact An attacker could make the ML-DSA verifier accept a crafted invalid signature under a maliciously generated verification key, if th...

GHSA-FHVH-VW7H-9XF3 libcrux-ml-dsa: Signature Verification on AVX2 Platforms Mishandles Edge Case

The AVX2 implementation of ML-DSA verification incorrectly implemented the usehint function, mishandling an edge case that should lead to signature rejection. Impact An attacker could make the ML-DSA verifier accept a crafted invalid signature under a maliciously generated verification key, if th...

XAI FL-IDS: A Federated Learning and SHAP-Based Explainable Framework for Distributed Intrusion Detection Systems

An Intrusion Detection System IDS is vital in cybersecurity, detecting unauthorized activity across networks. With attacks on network layers increasing, stronger IDSs are needed. Yet most IDSs rely on centralized detection, forcing IoT nodes to ship data to a server, adding overhead and offering ...

The vulnerability of the File System Access API interface in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the File System Access API interface in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information remotely...

The vulnerability of the Site Isolation function in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security mechanisms.

The vulnerability of the Site Isolation function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through a specially created HTML page...

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security mechanisms.

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through a specially created HTML page...

The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security mechanisms.

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms through a specially created HTML page...

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of WebRTC technology in Google Chrome and Microsoft Edge relates to memory boundary violation. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

The vulnerability of the “Network” control element in Google Chrome and Microsoft Edge browsers allows a hacker to bypass existing security mechanisms.

The vulnerability of the “Network” control element in Google Chrome and Microsoft Edge relates to external control over a web parameter that is assumed to be immutable. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through a specially created HTML...

The vulnerability of the graphics processors in Google Chrome and Microsoft Edge allows a hacker to gain unauthorized access to protected information.

The vulnerability of Google Chrome and Microsoft Edge web browsers relates to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

The vulnerability of the graphics processors in Google Chrome and Microsoft Edge allows a hacker to gain unauthorized access to protected information.

The vulnerability of Google Chrome and Microsoft Edge web browsers relates to the use of uninitialized variables. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

The vulnerability of the Opaque Response Blocking (ORB) mechanism in browsers Google Chrome and Microsoft Edge allows attackers to bypass existing security mechanisms.

The vulnerability of the Opaque Response Blocking ORB mechanism in Google Chrome and Microsoft Edge is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through a specially created HTML page...

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge browsers allows a hacker to gain unauthorized access to protected information.

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge stems from insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge allows attackers to gain unauthorized access to protected information.

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge involves reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Blink rendering module in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Blink rendering module in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created HTML page...

The vulnerability of the “Network” control element in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user interface.

The vulnerability of the “Network” control element in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to replace the user’s interface with a specially created HTML page...

The vulnerability of the Views component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...