CVE-2026-84357

An improper input validation flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523208474 Mitigation Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Produc...

CVE-2026-84357: Improper Input Validation

Improper input validation in Omnibox in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: High...

PT-2026-84838

Name of the Vulnerable Software and Affected Versions LiteLLM versions prior to 1.88.6 LiteLLM versions prior to 1.96.2 Description Authenticated proxy users can redirect outbound provider calls to a destination under their control, causing the proxy to leak configured provider credentials. This...

CVE-2026-84325: Improper Input Validation

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. Chromium security severity: High...

F5 Networks BIG-IP : Intel UEFI vulnerability (K000163187)

The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K000163187 advisory. Improper input validation in the UEFI FlashUcAcmSmm module for some IntelR reference platforms may allow an escalation...

PT-2026-84899

Name of the Vulnerable Software and Affected Versions Drupal Email Verification / SMS Verification / OTP Verification versions 0.0.0 through 2.4.0 Description An unauthenticated reflected Cross-site Scripting XSS issue exists because the module does not sufficiently filter user-supplied input...

PT-2026-84898

Name of the Vulnerable Software and Affected Versions Drupal Email Verification / SMS Verification / OTP Verification versions 0.0.0 through 2.4.0 Description An authentication bypass issue exists due to insufficient validation of user-supplied input. This flaw allows an attacker to bypass the...

PT-2026-84712

The Passster WordPress plugin before 4.2.24 does not handle input properly in an AJAX action, allowing unauthenticated users to retrieve the value of password protected content...

PT-2026-84623

The RegistrationMagic WordPress plugin before 6.0.9.9 does not escape a registration form field value before outputting it in an HTML attribute on an administrative page, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against high privilege users such as admin...

PT-2026-84644

The Easy Waveform Player plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the shortcode easywaveformplayer function in all versions up to, and including, 1.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with...

Spellcheck Component Sensitive Data Access

The vulnerability in the spellcheck component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

Network Component Compromise Data Compromise

The vulnerability in the Network component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

SanitizerAPI Component Data Compromise

The vulnerability in the SanitizerAPI component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

Chromoting Remote Administration DoS

The vulnerability in the Chrome Remote Desktop remote administration tool for Google Chrome and Microsoft Edge stems from insufficient input validation. Exploitation of this vulnerability could allow a remote attacker to cause a denial of service...

Google Chrome Edge PopupBlocker Data Compromise

The PopupBlocker component vulnerability in Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to compromise data integrity by using a specially crafted HTML page...

WebAppInstalls DoS

The vulnerability in the WebAppInstalls component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability allows a remote attacker to trigger a denial-of-service condition by using a specially crafted HTML page...

D-Link DCS-932L Subroutine Arbitrary Command Execution

The vulnerability of the sub42EF14 function /bin/alphapd of the D-Link DCS-932L microprogrammed surveillance camera is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary commands...

Skia Graphic Library DoS

The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the Downloads component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service...

Gemini AI Assistant DoS

The Gemini AI assistant vulnerability formerly known as GLIC in Gemini Live in Chrome in Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...