Extensions Component Protected Information Access

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Extensions Component Protected Information Access

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Extensions Component Protected Information Access

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to gain access to protected information...

Extensions Component Compromise Protected Information

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-110156

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer proces...

DEBIAN-CVE-2026-110156

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2026-110156

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2026-110156

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2026-110156

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

CVE-2026-110156

Google Chrome on Mac versions prior to 155.0.8059.79 is vulnerable to an incorrect reference resolution flaw in the Extensions component. A remote attacker who has already compromised the renderer process can leverage this vulnerability to execute arbitrary code outside the sandbox using a crafte...

CVE-2026-69945

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...

CVE-2026-69945

The Windows AppX Deployment Extensions component is vulnerable to a local elevation of privilege due to missing authorization . An authorized attacker can exploit this flaw to obtain elevated privileges on the system. The vulnerability has a CVSS 3.1 score of 8.8 (HIGH) and is officially document...

Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...

CVE-2026-69945: Missing Authorization

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...

CVE-2026-110156: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in Extensions in Google Chrome on on Mac prior to 155.0.8059.79 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted Chrome extension. Chromium security severity: High...

PT-2026-113488

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.79 Description Incorrect reference resolution in Extensions on Mac allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by using a crafted...

Microsoft Windows: CVE-2026-69945: Windows AppX Deployment Extensions Elevation of Privilege Vulnerability

Missing authorization in Windows AppX Deployment Extensions allows an authorized attacker to elevate privileges locally...

CVE-2026-85950

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are affected by an authorization flaw within the REST extensions . This improper privilege management allows a remote attacker with administrative privileges to access authentication material belonging to higher-privileg...

CVE-2026-85950 Improper privilege management in Progress MarkLogic Server REST extensions

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain an authorization flaw that could allow a remote attacker with administrative privileges to access authentication material associated with higher-privileged users, potentially resulting in unauthorized...

Important: openssl11

Issue Overview: Issue summary: A certificate with many nameRelativeToCRLIssuer CRL distribution points causes disproportionate heap growth when OpenSSL caches X.509 extensions. Impact summary: Receiving a crafted certificate from a malicious peer can lead to significant memory pressure and possib...