7019 matches found
CVE-2026-95287
Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-89247
Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-95287
Google Chrome versions prior to 154.0.8037.57 are affected by a missing authorization check in the Navigation mechanism. This flaw allows a remote attacker who has compromised a renderer process to bypass site isolation protections by tricking a user into loading a crafted HTML page. Site isolati...
CVE-2026-95287
Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-95301
Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...
CVE-2026-95301
Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...
CVE-2026-95301
Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...
CVE-2026-95301
Google Chrome versions prior to 154.0.8037.57 are vulnerable to a missing authorization flaw in the Extensions component. A remote attacker who has compromised the renderer process can exploit this by using a crafted HTML page to bypass site isolation . This vulnerability is categorized with High...
EUVD-2026-89222
Missing authorization in Extensions in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...
CVE-2026-102757
A vulnerability in ThreadX allows an unprivileged, memory-protected module to gain privileged memory read and write access. The root cause is a flaw in the Module Manager , which incorrectly validates object addresses by only checking if they fall outside the module. An attacker can bypass this b...
CVE-2026-102757
An unprivileged, memory-protected ThreadX module can have the kernel read and write memory at addresses of its choosing, in privileged mode, and can use that to clear the MPU enable bit and remove its own isolation boundary. The Module Manager decided whether a privileged service could dereferenc...
CVE-2026-102806 OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines
OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. Sandboxed sessions or untrusted content can cause the Gateway to read files from sibling session sandboxes or shared...
EUVD-2026-89106
OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. Sandboxed sessions or untrusted content can cause the Gateway to read files from sibling session sandboxes or shared...
CVE-2026-102806 OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines
OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. Sandboxed sessions or untrusted content can cause the Gateway to read files from sibling session sandboxes or shared...
CVE-2026-102806
OpenClaw versions before 2026.9.5 are affected by an incorrect authorization vulnerability in the Gateway's local media root allowlist. This flaw breaks filesystem isolation between sandboxed sessions, allowing sandboxed sessions or untrusted content to read files from sibling session sandboxes o...
CVE-2026-102806 OpenClaw before 2026.9.5 Sandbox Isolation Bypass via Media Pipelines
OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in the Gateway's local media root allowlist that breaks filesystem isolation between sandboxed sessions. Sandboxed sessions or untrusted content can cause the Gateway to read files from sibling session sandboxes or shared...
CVE-2026-20223
CVE-2026-20223 ⚠️ Investigación de Seguridad y Aviso Legal 📌 Propósito de Este Repositorio Este repositorio se proporciona estrictamente con fines educativos, académicos y de investigación autorizada en ciberseguridad. Está destinado a apoyar la comprensión de: Vulnerabilidades de seguridad y...
CVE-2026-0001
⚠️ Aviso Legal y de Investigación de Seguridad 📌 Propósito de Este Repositorio Este repositorio se proporciona estrictamente con fines educativos, académicos y de investigación autorizada en ciberseguridad. Está destinado a apoyar la comprensión de: Vulnerabilidades de seguridad y conceptos de...
DEBIAN-CVE-2026-100821
Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...
CVE-2026-100821
Site isolation issue in the Panning and Zooming component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17...