ROS-20260910-73-0026

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

ROS-20260910-73-0021

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260910-73-0063

The vulnerability of the Password component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260910-73-0010

The vulnerability of the Mojo web browser components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260910-73-0130

The vulnerability of the PerformanceAPIs component in Google Chrome and Microsoft Edge relates to the manipulation of cross-site requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ROS-20260910-73-0117

The vulnerability of the SurfaceCapture component in Google Chrome and Microsoft Edge relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data, as well as cause service interruptions through a...

ROS-20260910-73-0039

The vulnerability of the CSS component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...

PT-2026-89551

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. In 1.16.1 and earlier, the manager role can store meta page title or meta page favicon through /api/admin/system-preferences, and MetaGenerator inserts those values into...

ROS-20260910-73-0106

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through a specially created HTML page...

PT-2026-89362

A flaw was found in Evolution. A remote attacker can exploit this vulnerability by sending a specially crafted HTML email containing a spoofed vCard control. When a victim clicks on this control, Evolution's trusted JavaScript handler incorrectly assigns an attacker-controlled JavaScript URL to a...

ROS-20260910-73-0103

The vulnerability of the PageInfo component in Google Chrome and Microsoft Edge relates to the improper presentation of critical information to the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260910-73-0088

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

ROS-20260910-73-0036

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a...

OPENSUSE-SU-2026:11745-1 perl-HTML-FormHandler-0.410.2-1.1 on GA media

These are all security issues fixed in the perl-HTML-FormHandler-0.410.2-1.1 package on the GA media of openSUSE Tumbleweed...

ROS-20260910-73-0077

The vulnerability of the GPU components in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260910-73-0054

The vulnerability of the Cast component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260910-73-0151

The vulnerability of the HTMLParser component in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a...

PT-2026-89414

MISP contains an HTML injection vulnerability in the MISPElementHTMLFormatterTool component, which is responsible for rendering MISP element references attributes, objects, and tags into inline HTML during PDF report export via the convert markdown to pdf module. The attribute, objectAttribute,...

ROS-20260910-73-0111

The vulnerability of the Geolocation component in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially created HTML page...

ROS-20260910-73-0133

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the lack of protective measures for the web page structure. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially...