Extensions Component Data Compromise

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

SanitizerAPI Component Data Compromise

The vulnerability of the SanitizerAPI component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially created HTML page...

DevTools DoS

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Navigation Component Google Chrome Microsoft Edge Confidential Data Access

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Video Capture Component Compromise Data Compromise

The vulnerability of the Video Capture component in Google Chrome and Microsoft Edge relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise data integrity through a specially crafted HTML page...

Google Chrome PopupBlocker

The vulnerability of the PopupBlocker component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

Omnibox address bars compromise Data Compromise

The vulnerability of the Omnibox address bars in Google Chrome and Microsoft Edge lies in insufficient validation of entered data. Exploiting this vulnerability allows a malicious actor to manipulate data integrity through a specially created HTML page...

CVE-2026-84325: Improper Input Validation

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...

WebAppInstalls Component DoS

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Input component in Google

The vulnerability of the Input component in Google Chrome and Microsoft Edge relates to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

PT-2026-84864

Name of the Vulnerable Software and Affected Versions fast-uri versions prior to 2.4.6 fast-uri versions 3.0.0 through 3.1.6 fast-uri versions 4.0.0 through 4.1.3 Description The software serializes the port component of a URI without proper validation. During the recomposition of the authority,...

Libde265 Heap Buffer Overflow DoS

The vulnerability of the de265imagegetbuffer function in the h.265 Libde265 implementation is related to insufficient cleaning of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

Skia DoS

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

CVE-2026-84325

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...

CVE-2026-84325

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...

CVE-2026-84325

Google Chrome and Microsoft Edge (Chromium-based) versions prior to 152.0.7977.75 are vulnerable to a High severity security bypass due to improper input validation in the DataTransfer component. A remote attacker can leverage social engineering to bypass system access restrictions via a co-insta...

CVE-2026-84325

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...

CVE-2026-84357

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...

CVE-2026-84357

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...