ROS-20260910-73-0113

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

CVE-2026-88869: Improper Neutralization of Input During Web Page Generation

AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored cross-site scripting vulnerability in the ADServer plugin's log.php endpoint that fails to escape the label parameter before storage. An unauthenticated attacker can inject malicious HTML through the label parameter,...

CVE-2026-88859: Improper Neutralization of Encoded URI Schemes in a Web Page

A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted HTML email containing a spoofed vCard control. When a victim clicks on this control, Evolution's trusted JavaScript handler incorrectly assigns an attacker-controlled JavaScript URL to a...

ROS-20260910-73-0074

The vulnerability of Google Chrome and Microsoft Edge web browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

ROS-20260910-73-0082

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260910-73-0055

The vulnerability of the Browser component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260910-73-0077

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260910-73-0152

The vulnerability of the PageInfo component in Google Chrome and Microsoft Edge relates to the improper presentation of critical information to the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260910-73-0134

The vulnerability of the Blink component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

ROS-20260910-73-0109

The vulnerability of XML components in Google Chrome and Microsoft Edge browsers is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a...

ROS-20260910-73-0100

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

ROS-20260910-73-0093

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260910-73-0065

The vulnerability of the SSL component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260910-73-0032

The vulnerability of the History Embeddings component in Google Chrome and Microsoft Edge browsers is related to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromis...

ROS-20260910-73-0140

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260910-73-0136

The vulnerability of PDF components in Google Chrome and Microsoft Edge browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to manipulate data integrity through a specially created HTML page...

ROS-20260910-73-0017

The vulnerability of the Cast component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

ROS-20260910-73-0015

The vulnerability of the Enterprise web browsers Google Chrome and Microsoft Edge involves the disclosure of information due to incompatibility. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260910-73-0027

The vulnerability of the Omnibox component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

ROS-20260910-73-0016

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...