8240 matches found
webkitgtk: webkitgtk: Maliciously crafted web content may cause unexpected process crash
A flaw was found in WebKitGTK. Processing maliciously crafted web content can trigger an out-of-bounds write due to improper input validation, resulting in an unexpected process crash...
webkitgtk: webkitgtk: A malicious website may process restricted web content outside the sandbox
A flaw was found in WebKitGTK. A malicious website can process restricted web content outside the sandbox due to improper input validation, potentially allowing access to resources that should be restricted...
Improper Input Validation
Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to Improper Input Validation in the processing of the X-Forwarded-Prefix header due to improper validation of backslash characters. An attacker can manipulate the Set-Cookie Path...
Improper Input Validation
Overview vrana/adminer is a Database management in a single file. Affected versions of this package are vulnerable to Improper Input Validation via the X-Forwarded-Prefix header. An attacker can manipulate redirect destinations, control the session cookie path attribute, and poison self-referenti...
PT-2026-81820
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Cookies allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin policy...
PT-2026-81694
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Dawn allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome t...
VulnCheck KEV: CVE-2026-63520
Improper input validation in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network...
PT-2026-81667
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Sync component allows a remote attacker to obtain sensitive information by sending crafted network traffic. Recommendations Update Google Chrome to...
PT-2026-81774
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Preload component allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web...
PT-2026-81629
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...
PT-2026-81803
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the ReadingList component allows a remote attacker who has already compromised the renderer process to bypass the web origin policy. This is achieved by usi...
PT-2026-81763
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in DevTools allows a remote attacker who has compromised the renderer process to bypass site isolation through the use of a crafted HTML page. Site isolation i...
PT-2026-81811
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts how a document or...
PT-2026-81813
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker to leak sensitive information. This is achieved by leveraging social engineering to entice a user to visit a...
PT-2026-81451
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could result in an application denial-of-service. An attacker could exploit this vulnerability to crash the application, leading to a denial-of-service condition. Exploitation of this issue does not require use...
PT-2026-81458
CAI Content Credentials is affected by an Improper Input Validation vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope. Exploitation of this issue requires user...
PT-2026-81831
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the FindInPage function allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page...
PT-2026-81623
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in Workers allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page. Recommendations...
PT-2026-81703
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the NTP Footer allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin...
PT-2026-81555
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the editing component allows a remote attacker to bypass the web origin policy. This occurs when an attacker compromises the renderer process and uses socia...