CVE-2026-109725: Use After Free

Use-after-free in the DOM: Core & HTML component. This vulnerability was fixed in Firefox 158, Firefox ESR 115.43, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5...

CVE-2026-76976: Improper Neutralization of Input During Web Page Generation

Applications based on SAP GUI for HTML in SAP NetWeaver Application Server ABAP do not sufficiently sanitize user-supplied content in certain functionality, allowing an authenticated attacker to send malicious content to another user. If the victim interacts with the affected content, malicious...

CVE-2026-109960: Improper Neutralization of Input During Web Page Generation

Froxlor 2.0.0 before 2.3.14 contains a stored cross-site scripting vulnerability that allows authenticated customers to inject HTML and JavaScript by setting a malicious theme value via customerindex.php. Script executes when an administrator views the customer overview with the Theme column...

CVE-2026-110103: Improper Neutralization of Input During Web Page Generation

bbs-go through 4.4.6 contains a stored cross-site scripting vulnerability that allows authenticated users to upload HTML or SVG files by spoofing the multipart Content-Type in POST /api/upload. Attackers can upload script-bearing documents served inline from /res and send their URLs to...

Google Chrome Downloads Component Unauthorized Access

The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information, as well as cause servi...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge browser services is related to improper initialization of resources. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge web browsers relates to operations involving resources after their expiration or release. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through the use of a specially crafted HTML page...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

DevTools Suite Compromise

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...

Autofill Function Information Disclosure

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to inadequate protection against attacks through external physical channels. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially...

Autofill Function Information Disclosure

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through the use of a specially crafted HTML page...

DevTools Suite Compromise

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to the improper implementation of security features at the client-side. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a...

DevTools Suite DoS

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge relates to inadequate flow management. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

Autofill Function Information Disclosure

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to a lack of mechanisms for verifying the source of data. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Autofill Function Information Disclosure

The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow a malicious actor to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Information Disclosure

The vulnerability of Google Chrome and Microsoft Edge web browsers is related to the exposure of information due to inconsistencies in their implementations. Exploiting this vulnerability can allow an attacker to gain access to protected information through a specially created HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability of Google Chrome and Microsoft Edge browsers relates to authentication errors. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information through a specially created HTML page...