PT-2026-84618

The Rank Math SEO WordPress plugin before 1.0.277 does not verify that the post whose schema it renders on the front end is publicly viewable, allowing unauthenticated visitors to disclose the schema and associated content of draft, pending, private, scheduled and password-protected posts...

PT-2026-84729

Observable Response Discrepancy CWE-204 in the Kibana Osquery feature can lead to information disclosure via Query System for Information CAPEC-54. An authenticated user holding Osquery live-query privileges could determine whether a scheduled query identifier exists in a Kibana space they are no...

PT-2026-84617

The Rank Math SEO WordPress plugin before 1.0.277.1 does not check whether a post is password protected before using its content to build publicly generated SEO metadata, allowing unauthenticated users to read the content of password-protected posts...

CVE-2026-84359

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

Oracle Access Manager Webgate Information Disclosure (April 2026 CPU)

Binary data oracleaccessmanagerwebgatecve20250725.nbin...

PT-2026-84629

The MasterStudy LMS WordPress Plugin WordPress plugin before 3.7.46 does not properly verify ownership of quiz question identifiers, allowing users with instructor access to read other instructors' quiz questions, including the correct answers and explanations...

CVE-2026-84329

Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84348

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84329

A confused deputy vulnerability exists in the CredentialProvider component of Google Chrome on Windows (versions prior to 152.0.7977.75). This flaw allows a remote attacker who has already compromised the renderer process to leak sensitive information by using a crafted HTML page. The issue also ...

CVE-2026-84348

A vulnerability in MediaCapture within Google Chrome (and other Chromium-based browsers like Microsoft Edge ) allows a remote attacker to leak sensitive information via a crafted HTML page. This information disclosure issue was present in versions prior to 152.0.7974.75 . Public exploits exist fo...

CVE-2026-84329

Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84327

Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84327

Incorrect authorization in Autofill in Google Chrome on on Android prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84348

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84329

Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-84348

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84323

Google Chrome and Microsoft Edge (Chromium-based) are affected by CVE-2026-84323 , a vulnerability caused by missing authorization in FileSystem . A remote attacker who has already compromised the renderer process can leverage social engineering to obtain sensitive information via a crafted HTML ...

CVE-2026-84323

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84323

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-84359

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...