9756 matches found
CVE-2026-79009
A flaw was found in Google Chrome. This user interface UI misrepresentation vulnerability allows a remote attacker, leveraging social engineering, to spoof UI elements. The attacker can achieve this by tricking a user into visiting a specially crafted HTML page. The consequence is that users coul...
Criminals turn placeholder domain into ClickFix trap
A domain that has long appeared in software documentation, code examples, and developer test material is now being used to push a ClickFix attack against Windows users. A placeholder domain stands in for a website in an example. The best-known is probably example.com. Another, third-party.com, ha...
CVE-2026-79042
A flaw was found in Google Chrome on Android. Missing authorization in the Payments functionality allows a remote attacker, leveraging social engineering, to potentially bypass system access restrictions. This can be achieved by enticing a user to interact with a specially crafted HTML page...
CVE-2026-79088
A flaw was found in Google Chrome's FileSystem component. A remote attacker could exploit this vulnerability by leveraging social engineering techniques and a specially crafted HTML page. This could allow the attacker to bypass system access restrictions, potentially leading to unauthorized acces...
CVE-2026-79108
A flaw was found in Google Chrome's Web Authentication Passkeys & Security Keys feature. A remote attacker could leverage social engineering techniques by presenting a crafted HTML page to a user. This misrepresentation in the user interface could allow the attacker to bypass system access...
CVE-2026-78947
A flaw was found in Chromium, a component of Google Chrome. This vulnerability, caused by incomplete cleanup, allows a remote attacker to bypass the web origin policy. By leveraging social engineering and a specially crafted Chrome extension, an attacker could gain unauthorized access to sensitiv...
CVE-2026-78974
A flaw was found in chromium-browser. This user interface UI misrepresentation vulnerability allows a remote attacker, through social engineering, to bypass system access restrictions by tricking a user into interacting with a specially crafted HTML page. This could lead to unauthorized access to...
Security Bulletin: Multiple Vulnerabilities in IBM Engineering AI hub
Summary Multiple vulnerabilities were addressed in IBM Engineering AI Hub version 1.4.0. Vulnerability Details CVEID:CVE-2026-59152 DESCRIPTION: LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to 0.8.18, an attacker who can send an HTTP request to a server...
CVE-2026-79026
A flaw was found in Google Chrome Extensions. This use-after-free vulnerability allows a remote attacker, leveraging social engineering, to potentially execute arbitrary code outside the sandbox. This occurs when a user is convinced to install a specially crafted Chrome extension, leading to...
CVE-2026-87575
A flaw was found in Google Chrome. This incorrect authorization vulnerability in the Loader component allows a remote attacker, through social engineering, to bypass system access restrictions. This can be achieved by enticing a user to open a specially crafted HTML page, leading to unauthorized...
CVE-2026-87617
A flaw was found in DevTools in Google Chrome. This vulnerability, a 'use after free' error, occurs when a program attempts to use memory after it has been freed, which can lead to unpredictable behavior. A remote attacker could exploit this by leveraging social engineering to entice a user to...
CVE-2026-87473
A flaw was found in the FileHandling component of Google Chrome. A remote attacker could exploit this vulnerability by leveraging social engineering techniques with a specially crafted HTML page. This could allow the attacker to bypass system access restrictions, potentially leading to unauthoriz...
CVE-2026-87549
A flaw was found in Google Chrome. An incomplete cleanup process within the Downloads feature allows a remote attacker, through social engineering and a specially crafted HTML page, to bypass system access restrictions. This could lead to unauthorized access to sensitive system resources...
Astra Linux – Vulnerability in Chromium
Information leaks in Extensions in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to leverage social engineering to obtain cross-origin data through a crafted Chrome Extension. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Improper input validation in ReaderMode in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Incorrect authorization in Permissions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leverage social engineering to obtain sensitive information through a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-71460
/api/v2/config/ is protected only by IsAuthenticated. licenseinfo accountnumber, subscriptionid, poolid, sku, supportlevel, instance counts returned to any authenticated user. The superuser/auditor gate only covers projectbasedir/projectlocalpaths/customvirtualenvs, not licenseinfo. Enables socia...
How device code phishing gives scammers access to your account
You receive an invitation to a password-protected meeting, a secure chatroom, or a shared document. To get access, it says, you need to enter a short code on a sign-in page for one of your accounts. The message claims the code will let you open the document or join the meeting. In fact, it approv...