6785 matches found
CVE-2026-10079 Stackrox: stackrox: deploy-time policy enforcement and visibility bypass via label injection
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes RHACS. When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshift.io/encoded-deployment-config label. A user with permission to create Deployments can set this label to "null", causi...
CVE-2026-10079
A flaw was found in Red Hat Advanced Cluster Security for Kubernetes RHACS. When processing Kubernetes Deployments, ACS replaces deployment identity metadata based on the openshift.io/encoded-deployment-config label. A user with permission to create Deployments can set this label to "null", causi...
CVE-2026-63220
CodeIgniter is a PHP full-stack web framework. In versions prior to 4.7.4, IncomingRequest::isSecure trusted the X-Forwarded-Proto and Front-End-Https headers from any incoming request, allowing an attacker could spoof these headers and cause the application to incorrectly treat an HTTP request a...
SUSE CVE-2026-17693
Insufficient policy enforcement in FileSystem in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2026-17813
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-18000
An insufficient policy enforcement flaw was found in the USB component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521623907...
CVE-2026-17986
An insufficient policy enforcement flaw was found in the Bluetooth component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519981896...
CVE-2026-18004
An insufficient policy enforcement flaw was found in the Speech component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522280805...
CVE-2026-17985
An insufficient policy enforcement flaw was found in the Speech component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519981430...
CVE-2026-17974
An insufficient policy enforcement flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519232592...
CVE-2026-17805
An insufficient policy enforcement flaw was found in the Glic component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516420806...
CVE-2026-17742
An insufficient policy enforcement flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499003233...
CVE-2026-17720
An insufficient policy enforcement flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=522545249...
CVE-2026-17662
An insufficient policy enforcement flaw was found in the Prefetch component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497491557...
CVE-2026-17756
An insufficient policy enforcement flaw was found in the Presentation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501980797...
CVE-2026-17739
An insufficient policy enforcement flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498353463...
CVE-2026-17815
An insufficient policy enforcement flaw was found in the GuestView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517427352...
CVE-2026-17743
An insufficient policy enforcement flaw was found in the ControlledFrame component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499204022...