Google Chrome Access Control DoS

The vulnerability in the Google Chrome web browser is related to access control errors. Exploiting this vulnerability could allow a malicious actor to trigger a service failure through a specially created HTML page...

Google Chrome Information Disclosure

The vulnerability in the Google Chrome web browser is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Digital Credentials DoS

The vulnerability of Digital Credentials components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

Media Component DoS

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Views Component Confidential Data Compromise

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and influence the integrity of data through a...

File Input Component DoS

The vulnerability of the File Input component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Password Component Access Confidential Data

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to improper authentication procedures. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Media component Google Chrome Confidential Data Access

The vulnerability of the Media component in the Google Chrome web browser is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data through a specially created HTML page...

CVE-2026-51153

A Stored Cross-Site Scripting (XSS) vulnerability exists in the TaskRunHandler.post() function (located in web/handlers/task.py) of QD versions 20220208 through 20250803 . The root cause is the lack of HTML encoding when rendering task log content (logtmp) into an HTML response using Python % str...

Password Manager DoS

The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

PT-2026-83785

Name of the Vulnerable Software and Affected Versions Aix-DB versions 1.0 through 1.2.4 Description The software renders markdown with raw HTML enabled into v-html bindings without proper sanitization, leading to stored cross-site scripting. This allows attackers to inject malicious HTML and...

RHEL 9 : osbuild-composer (RHSA-2026:61585)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:61585 advisory. A service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Besides building...

WebRTC Component Confidential Data Access

The vulnerability of the WebRTC component in Google Chrome and Microsoft Edge relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

Password Manager DoS

The vulnerability of the Password Manager component in Google Chrome and Microsoft Edge browsers is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-82654

SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rendering functions. Attackers can set a block's name to contain HTML/script tags that execute when another user views documents referencing or displaying that block...

CVE-2026-82654 SiYuan before v3.8.1 Stored XSS via block name

SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rendering functions. Attackers can set a block's name to contain HTML/script tags that execute when another user views documents referencing or displaying that block...

EUVD-2026-68240

SiYuan before v3.8.1 fails to properly escape block name, alias, and memo fields in hint, backlink, and breadcrumb rendering functions. Attackers can set a block's name to contain HTML/script tags that execute when another user views documents referencing or displaying that block...

CVE-2026-82642

Readest is an open-source e-book reader built on Tauri. In versions prior to 0.11.16, EPUB chapter HTML is sanitized with DOMPurify using a configuration that forbade only the tag FORBIDTAGS: 'script' in apps/readest-app/src/services/transformers/sanitizer.ts. DOMPurify does not parse the content...

CVE-2026-14307

The geotargetingwp WordPress plugin before 3.5.6.2 does not sanitise or escape several parameters before reflecting them back in AJAX responses that are served with an HTML content type, allowing unauthenticated attackers to inject arbitrary web scripts that execute when a victim is tricked into...

PT-2026-83580

Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.1 Description Improper escaping of block name, alias, and memo fields occurs within the hint, backlink, and breadcrumb rendering functions. This allows an attacker to inject HTML or script tags into a block's name,...