Media Component Bypass Security

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a malicious actor to escape from the sandbox environment by using a specially created HTML page...

Ozone Component DoS

The vulnerability in the Ozone component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory allocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Edge GetUserMedia Data Compromise

The vulnerability in the GetUserMedia component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

Google Chrome Edge DoS

The vulnerability in the GetUserMedia component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

GamepadAPI Component Sensitive Data Access

The vulnerability in the GamepadAPI component of Google Chrome and Microsoft Edge is related to errors in variable initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

Dawn Component Sensitive Data Access

The vulnerability in the Dawn component of Google Chrome and Microsoft Edge web browsers is related to access control flaws. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

Storage Component Sensitive Data Access

The vulnerability in the Storage component of Google Chrome and Microsoft Edge web browsers is related to concurrent execution using a shared resource with improper synchronization. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially...

DarkMode Component Compromise Data Compromise

The vulnerability in the DarkMode component of Google Chrome and Microsoft Edge web browsers is related to improper restriction of the visual layers of the user interface. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML...

Google Chrome Edge CSS Data Tampering

The CSS component vulnerability in Google Chrome and Microsoft Edge is related to improper handling of web page structure. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data and compromise its integrity by using a specially crafted HTML page...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

V8 JavaScript DoS

The V8 JavaScript script handler vulnerability in Google Chrome and Microsoft Edge web browsers is related to errors in variable initialization. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...

Tint Component DoS

The Tint component vulnerability in Google Chrome and Microsoft Edge web browsers is related to reading beyond the permitted boundaries of the data buffer. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML page...

V8 JavaScript DoS

The V8 JavaScript script handler vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper memory usage after deallocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

IndexedDB DoS

The IndexedDB component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploiting this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The DOM component vulnerability in Google Chrome and Microsoft Edge web browsers is related to an out-of-bounds memory operation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge Sensitive Data Access

The vulnerability in the Navigation component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

InterestGroups Component DoS

The vulnerability in the InterestGroups component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory allocation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Oracle Linux 9 : ELSA-2026-61316-0: / xmlrpc-c (ELSA-2026-613160)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-613160 advisory. 1.51.0-17 - Fix HTML injection in Abyss error responses and directory listings - Resolves: CVE-2026-15928 Tenable has extracted the preceding description bloc...

PT-2026-84714

The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before outputting it within an HTML attribute, which could allow users with the Administrator role and above to perform Stored Cross-Site Scripting attacks...

SVG Component Access Sensitive Data

The SVG component vulnerability in Google Chrome and Microsoft Edge web browsers is related to cross-site request forgery. Exploiting this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...