2 matches found
PT-2026-102340
Name of the Vulnerable Software and Affected Versions DOMSanitizer versions prior to 1.0.15 Description An incomplete input-validation defect exists in the isDangerousUrl function, which is used to reject dangerous URL values in the href and xlink:href attributes. While the javascript: scheme is...
4.7CVSS5.8AI score0.00274EPSS
SaveExploits0References7
The vulnerability of the UEFI Firmware component of Intel microprogramming systems, related to defects in input data validation, allows attackers to exploit their privileges.
The vulnerability of the UEFI Firmware component of Intel microprocessors is related to defects in input validation. Exploiting this vulnerability can allow attackers to enhance their privileges...
7.5CVSS5.4AI score0.00187EPSS
SaveExploits0References5Affected Software1
20