DRUPAL-CONTRIB-2026-115

This module enables users to authenticate using LDAP or Active Directory credentials. The module does not sufficiently sanitize user-supplied input before incorporating it into an LDAP search filter. This allows an attacker to discover additional information they should not normally be able to...

SUSE CVE-2026-79272

Improper input validation in FindInPage in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-79288

Improper input validation in Autofill in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: High...

CVE-2026-79288

A flaw was found in Google Chrome's Autofill feature on Android. Improper input validation allows a remote attacker to obtain sensitive information by tricking a user into visiting a specially crafted HTML page. This vulnerability could lead to the exposure of sensitive user data...

CVE-2026-79123

A flaw was found in Google Chrome. Improper input validation in the New Tab Page NTP Footer allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This can be achieved by enticing a user to visit a crafted HTML page...

CVE-2026-79260

A flaw was found in Google Chrome. Improper input validation in the Cookies component allowed a remote attacker, who had already compromised the renderer process, to bypass the web origin policy. This could be achieved by enticing a user to visit a crafted HTML page, potentially leading to...

CVE-2026-79243

A flaw was found in Google Chrome's ReadingList component. This improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass could enable unauthorized access to data or functionality that should be...

CVE-2026-79106

A flaw was found in Google Chrome. Improper input validation in the Input component allows a remote attacker, who has already compromised the renderer process and leveraged social engineering, to bypass the web origin policy. This could lead to unauthorized access to sensitive information or...

CVE-2026-79272

A flaw was found in Google Chrome's FindInPage component. This improper input validation vulnerability could allow a remote attacker, who has compromised the browser's renderer process, to leak sensitive cross-origin data. The attacker could achieve this by tricking a user into visiting a special...

CVE-2026-79253

A flaw was found in the Network component of Google Chrome. A remote attacker, leveraging social engineering tactics, could exploit this vulnerability by enticing a user to visit a specially crafted HTML page. This improper input validation could lead to the disclosure of sensitive information...

CVE-2026-79259

A flaw was found in Google Chrome. Improper input validation in the Safebrowsing component allows a remote attacker to bypass system access restrictions. This vulnerability can be exploited by providing a specially crafted file, leading to unauthorized access...

CVE-2026-78963

A flaw was found in chromium-browser. Improper input validation in the Media component of Google Chrome could allow a remote attacker to execute arbitrary code outside of the sandbox. This exploitation can occur by enticing a user to visit a specially crafted HTML page. The primary consequence is...

CVE-2026-58624

A flaw was found in the sshd-git component of Apache MINA SSHD, specifically within its GitPgmCommandFactory. An authenticated SSH user could exploit improper input validation to execute arbitrary JGit commands. This allows an attacker to write files to arbitrary locations on the server,...

CVE-2026-79025

A flaw was found in Workers in Google Chrome. Improper input validation allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by presenting a specially crafted HTML page to the user...

CVE-2026-79032

A flaw was found in Chromium's Network component. An improper input validation vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass system access restrictions. This can be achieved by crafting a malicious HTML page, leading to unauthorized access to...

CVE-2026-79000

A flaw was found in Google Chrome. Improper input validation in DeviceBoundSessionCredentials allows a remote attacker, leveraging social engineering, to bypass the web origin policy. This can be achieved by sending crafted network traffic, potentially leading to unauthorized access or manipulati...

CVE-2026-78980

A flaw was found in ReaderMode in Google Chrome. A remote attacker, by leveraging social engineering, could exploit improper input validation to bypass the web origin policy. This allows the attacker to access a privileged page via a specially crafted HTML page, potentially leading to unauthorize...

CVE-2026-78976

A flaw was found in Google Chrome. Improper input validation in the StorageAccessAPI could allow a remote attacker to bypass the web origin policy. This exploitation requires the attacker to first compromise the renderer process and then use a specially crafted HTML page. The successful bypass of...

CVE-2026-79192

An improper input validation flaw was found in the Variations component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=502082953...

CVE-2026-79214

A flaw was found in Chromium. Improper input validation within the Preload component allows a remote attacker, who has already compromised the renderer process, to bypass the web origin policy. This bypass can be achieved by crafting a malicious HTML page, leading to unauthorized access to data o...