PT-2026-127280

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in Compositing allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. Recommendations Update Google...

PT-2026-127296

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in Skia allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-127302

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in Skia allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to...

Google Chrome Vulnerability: CVE-2026-118328

Improper input validation in WebRTC in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-118355

Improper input validation in Command in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-118316

Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-127267

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in SVG allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to...

PT-2026-127276

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in WebRTC allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome ...

PT-2026-127279

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in the FileAPI allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google...

PT-2026-127262

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in Views allows a remote attacker to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome ...

Google Chrome Vulnerability: CVE-2026-118309

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

Google Chrome Vulnerability: CVE-2026-118315

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

PT-2026-127256

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.73 Description Improper input validation in SVG allows a remote attacker to potentially execute arbitrary code inside the sandbox by using a crafted HTML page. Recommendations Update Google Chrome to...

Google Chrome Vulnerability: CVE-2026-118354

Improper input validation in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

CVE-2026-116400

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins Button Block button-block allows Stored XSS.This issue affects Button Block: from n/a through 1.2.7...

CVE-2026-116400

The bPlugins Button Block WordPress plugin (versions n/a through 1.2.7 ) is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation within the button-block component. This flaw allows an attacker to store m...

CVE-2026-116395

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins LightBox Block lightbox-block allows Stored XSS.This issue affects LightBox Block: from n/a through 1.2.0...

EUVD-2026-109995

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in bPlugins LightBox Block lightbox-block allows Stored XSS.This issue affects LightBox Block: from n/a through 1.2.0...

CVE-2026-116396 WordPress Amelia plugin <= 2.4.12 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in TMS Amelia ameliabooking allows Stored XSS.This issue affects Amelia: from n/a through 2.4.12...

CVE-2026-116396

The TMS Amelia ameliabooking WordPress plugin versions up to and including 2.4.12 are vulnerable to a Stored Cross-site Scripting (XSS) vulnerability. The root cause is the improper neutralization of input during web page generation , which allows an attacker to inject malicious scripts. While th...