CVE-2026-18019

Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

CVE-2026-18019

A side-channel information leakage in Media within Google Chrome (prior to version 151.0.7922.72) allows a remote attacker to leak cross-origin data via a crafted HTML page. This vulnerability is present in Chromium and affects several distributions, including Fedora 43 , Fedora 44 , openSUSE 16 ...

CVE-2026-9991

A high-severity vulnerability in Google Chrome on Windows (prior to version 148.0.7778.216 ) was caused by an inappropriate implementation in Media . A remote attacker who has already compromised the renderer process can exploit this flaw to leak cross-origin data using a crafted HTML page. This ...

CVE-2026-8017

Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

Linux Distros Unpatched Vulnerability : CVE-2018-6168

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in media engine in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to obtain potentially sensitive information from process memor...

CVE-2023-21312

In IntentResolver, there is a possible cross-user media read due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

Server-Side Request Forgery (SSRF) in chocobozzz/peertube

Description First of all, Thanks to my friend Haxatron for his excellent report I read the fix commit, and I found out that the code only Checked the IP addresses and didn't check the domain names that refer to a private IP address Steps to reproduce first, set up a local server at 127.0.0.2:8000...

Healthcare service faces test of willpower with Ransomware authors

Healthcare and ransomware are in the news in a big way. Data leaks are inevitable, but those are typically associated with accidents by the general public. Possibly the most malicious type of data spillage is when people compromising said data decide to do the spilling. It’s one thing to...

UN hacked, becomes target of massive state-sponsored spying op

By Waqas The organization admits experiencing sophisticated cyberattacks after Media Leaked Details. This is a post from HackRead.com Read the original post: UN hacked, becomes target of massive state-sponsored spying op...