24644 matches found
PYSEC-2026-4219 GPT Researcher MCP STDIO configuration allows remote command execution
An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page...
CVE-2023-4357-Exploitation
CVE-2023-4357-Exploitation Network Security Project Description Insufficient validation of untrusted input in XML in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page. Reproduce Set up the Environment Download Chrome on Linux...
PT-2026-115317
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description Improper input validation in the Desktop component allows a remote attacker to potentially execute arbitrary code outside the sandbox by inducing the user to visit a crafted HTML page...
PT-2026-115319
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.84 Description Memory corruption in the Core component allows a remote attacker to read memory by inducing the user to visit a crafted HTML page. Recommendations Update Google Chrome to version...
CVE-2026-110141
Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
EUVD-2026-100633
Use after free in Bindings in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: High...
EUVD-2026-100636
Information leak in Passwords in Google Chrome prior to 155.0.8059.79 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: High...
EUVD-2026-100653
Observable discrepancy in Media in Google Chrome prior to 155.0.8059.79 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
Preload Component Access Information Disclosure
The vulnerability of the Preload component in Google Chrome and Microsoft Edge is related to the use of a name with an incorrect link. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
Geometry Component Google Chrome Microsoft Edge Protected Information DoS
The vulnerability of the Geometry component in Google Chrome and Microsoft Edge relates to the false representation of critical information to the user interface. Exploiting this vulnerability can allow a malicious actor to gain access to protected information, as well as cause service...
Animation Component Google Chrome Microsoft Edge DoS
The vulnerability of the Animation component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Preload Component Access Information Disclosure
The vulnerability of the Preload component in Google Chrome and Microsoft Edge is related to insufficient validation of the input protected information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
Canvas Component Protected Information Access
The vulnerability of the Canvas component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
SiteIsolation Component Google Chrome Microsoft Edge Protected Information
The vulnerability of the SiteIsolation component in Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow a remote attacker to gain access to protected information through a specially created HTML page...
Transactions Platform XSS
The vulnerability of the Transactions Platform web browsers Google Chrome and Microsoft Edge is related to improper authentication. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...
Payments Component Google Chrome Microsoft Edge Information Disclosure
The vulnerability of the Payments component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability could allow a malicious actor to gain access to protected information through a specially created HTML page...
Parser Component DoS
The vulnerability of the Parser component in Google Chrome and Microsoft Edge is related to insufficient checking of unusual or exceptional states. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
GPU components DoS
The vulnerability of the GPU components in Google Chrome and Microsoft Edge lies in insufficient checking of the status of shared resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...
Preload Component Access Information Disclosure
The vulnerability of the Preload component in Google Chrome and Microsoft Edge involves exposing information in an erroneous protected area. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...
Component Access Information Disclosure
The vulnerability of the Browser component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information through a specially created...