CVE-2026-93379

Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Low...

CVE-2026-93387

Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-93387

Improper state validation in Skia in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-93387

A remote attacker can exploit improper state validation in the Skia component of Google Chrome (prior to version 153.0.8010.52) to obtain cross-origin data via a crafted HTML page. This vulnerability has been addressed in Chromium 153.0.8010.52 and corresponding distribution packages, such as 153...

CVE-2026-93379

Google Chrome versions prior to 153.0.8010.52 are vulnerable to CVE-2026-93379 due to an incorrect authorization in ORB . This flaw allows a remote attacker to bypass site isolation by serving a crafted HTML page. Security advisories for openSUSE, Fedora, and Debian indicate that the update to ve...

CVE-2026-93382

Use after free in PDFium in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-93382

A Use after free vulnerability exists in the PDFium component of Google Chrome (prior to version 153.0.8010.52). This flaw allows a remote attacker to execute arbitrary code inside the sandbox by navigating to a crafted HTML page . Impacted systems include Fedora 44 , openSUSE Backports SLE-15-SP...

CVE-2026-93374

Use after free in Dawn in Google Chrome on on Android prior to 153.0.8010.52 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Critical...

CVE-2026-93374

A use after free vulnerability exists in Dawn within the Google Chrome browser on Android (prior to version 153.0.8010.52 ). A remote attacker could potentially execute arbitrary code outside the sandbox by serving a crafted HTML page to the victim. This issue has been addressed in the 153.0.8010...

Malicious code in lib-bb-html-sanitizer (npm)

Source: checkmarx 74072bddc9908e0147976fde0680c197ac5b38167bfcdf14afc5f79f23749f72 Malicious packages campaign since 2021 targeting developers, steals source code and secrets --- Credit: OpenSSF source...

Malicious code in less-loader-quantum-miranda-html-webpack-plugin (npm)

Source: amazon-inspector 9f72622ee9f60adeb5f780beefca8e1efd2fb397f3f46dc1ae0ab8ef0a1b15de This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in less-html-webpack-plugin-phoebe-neptune (npm)

Source: amazon-inspector 6233d66c6ce8a24ae4549b43abe8ec5046cc8b0a19973a0bf6447ca912d0408c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

GHSA-QRFJ-MGW8-J9C6 @platejs/core HTML deserialization can trigger browser behavior during parsing

Summary HTML strings passed to Plate's core deserialization APIs were parsed in the active document. Certain HTML attributes could therefore trigger browser behavior during parsing, before the content was converted into editor nodes. Applications that deserialize HTML from untrusted or cross-user...

@platejs/core HTML deserialization can trigger browser behavior during parsing

Summary HTML strings passed to Plate's core deserialization APIs were parsed in the active document. Certain HTML attributes could therefore trigger browser behavior during parsing, before the content was converted into editor nodes. Applications that deserialize HTML from untrusted or cross-user...

EUVD-2026-80782

@platejs/core HTML deserialization can trigger browser behavior during parsing...

CVE-2026-68523

fulgur is a Rust library that converts untrusted HTML/CSS into PDF, commonly used server-side to process input from many tenants. In versions prior to 0.19.0 , a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page with no upper bound ,...

CVE-2026-68537

Fulgur , a Rust library that converts untrusted HTML/CSS to PDF in multi-tenant server environments, is vulnerable to denial of service in versions prior to 0.19.0 . A body-direct child element whose CSS-resolved height greatly exceeds the page height is sliced into one fragment per page with no ...

CVE-2026-68537

"fulgur" converts untrusted HTML/CSS into PDF, commonly on a server that processes input supplied by many tenants. In versions prior to 0.19.0, a body-direct child whose CSS-resolved height greatly exceeds the page height was sliced into one fragment per page with no upper bound. This is fixed in...

CVE-2026-45143

Chamilo LMS versions 2.0.0 through at least 2.1.0 contain a stored XSS in the private messaging feature. The Message.content field is stored without server-side sanitization and rendered as HTML via v-html in MessageShow.vue and view_message.html.twig. An authenticated low-privilege user (e.g., a...

CVE-2026-45143 Chamilo LMS: Student-to-admin stored XSS in private messages via v-html

Chamilo LMS is an open-source learning management system. From 2.0.0 through at least 2.1.0, Chamilo LMS stores private Message.content without server-side sanitization and renders it as HTML in assets/vue/views/message/MessageShow.vue and public/main/template/default/message/viewmessage.html.twi...