Chromium: CVE-2026-16421 Inappropriate implementation in WebAudio

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-16420 Type Confusion in WebAudio

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-16419 Out of bounds read and write in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-16418 Stack buffer overflow in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-16417 Uninitialized Use in Skia

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-16416 Integer overflow in Chromecast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-16414 Insufficient validation of untrusted input in Chromecast

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2026-16413 Out of bounds write in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA91173 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A spoofing vulnerability in Microsoft Edge Chromium-base...

Microsoft Edge (Chromium) < 148.0.3967.96 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 148.0.3967.96. It is, therefore, affected by multiple vulnerabilities as referenced in the May 29, 2026 advisory. - Heap buffer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to...

PT-2026-64817

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description An origin validation error allows an unauthorized attacker to perform spoofing over a network. Origin validation is a security mechanism used to verify that a request...

Microsoft Edge (Chromium) < 149.0.4022.69 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 149.0.4022.69. It is, therefore, affected by multiple vulnerabilities as referenced in the June 15, 2026 advisory. - Inappropriate implementation in Mojo in Google Chrome on Windows prior to 149.0.7827.115 allowed a...

Microsoft Edge (Chromium) < 149.0.4022.62 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 149.0.4022.62. It is, therefore, affected by multiple vulnerabilities as referenced in the June 15, 2026 advisory. - Insufficient validation of untrusted input in Extensions in Google Chrome prior to 149.0.7827.103...

PT-2026-64818

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based affected versions not specified Description An origin validation error allows an unauthorized attacker to disclose information over a network. Origin validation is a security mechanism used to verify that a reques...

Microsoft Edge (Chromium) < 150.0.4078.96 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 150.0.4078.96. It is, therefore, affected by multiple vulnerabilities as referenced in the July 23, 2026 advisory. - Insufficient validation of untrusted input in Chromecast in Google Chrome prior to 150.0.7871.182...

CVE-2026-65911

In DOMPurify through 3.3.3, function predicates supplied via ADDATTR or ADDTAGS to DOMPurify.sanitize persist in internal state EXTRAELEMENTHANDLING across subsequent sanitize calls on the same instance. If a later call on the same instance provides ADDATTR or ADDTAGS as an array rather than a...

EUVD-2026-48273

DOMPurify through 3.3.3 fails to sanitize DOM elements passed via INPLACE mode when the element originates from a different window/realm e.g., an iframe's contentDocument. A cross-realm instanceof check in the private isNode function returns false for foreign-realm nodes, causing DOMPurify to...

NPM: Next.js: Unbounded Server Action payload in Edge runtime

NPM: Next.js: Unbounded Server Action payload in Edge runtime vulnerability discovered by ? in WordPress Npm next versions = 13.0.0, 15.5.21...

Allocation of Resources Without Limits or Throttling

Overview next is a react framework. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling via the handleAction Server Actions path in the App Router Edge runtime. An attacker can exhaust server memory by sending an oversized Server Action request...

Next.js: Unbounded Server Action payload in Edge runtime

Impact Requests targeting Next.js applications using App Router with at least one Server Action can lead to excessive memory consumption if that Server Actions uses the Edge runtime Workarounds If you cannot upgrade, ensure your hosting provider limits the request's body size. 5 MiB should be...