147990 matches found
One-Click Microsoft 365 Copilot Flaw Could Have Let Attackers Steal Emails, Files, and MFA Codes
A single click on a trusted Microsoft link could have let an attacker pull emails, calendar details, and indexed files out of Microsoft 365 Copilot Enterprise Search. Researchers at Varonis Threat Labs chained three bugs into a one-click exfiltration path they call SearchLeak. Because the link...
Chromium: CVE-2026-12018 Inappropriate implementation Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12009 Insufficient validation of untrusted input Accessibility
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2026-12008 Use after free DigitalCredentials
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
HP One Agent Software – Security Update
Potential security vulnerabilities have been identified in the HP One Agent for certain HP PC products, which might allow for escalation of privilege and/or denial of service. HP is releasing software updates to mitigate these potential vulnerabilities. Mitigation is available in HP Privacy...
The vulnerability in the API for working with foldable devices allows a hacker to bypass existing security mechanisms. This vulnerability is present in the Foldable API of Google Chrome and Microsoft Edge browsers.
The vulnerability of the API for working with foldable devices, such as Google Chrome and Microsoft Edge browsers’ APIs, is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to bypass existing security measures remotely...
The vulnerability of Google Chrome and Microsoft Edge web browser components allows attackers to bypass the sandboxing protection mechanisms.
The vulnerability of Google Chrome and Microsoft Edge web browsers’ Bluetooth components stems from the absence of a mechanism for verifying input data on the server side. Exploiting this vulnerability allows an attacker to bypass the sandboxing protection mechanisms...
Vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint Enterprise Server, related to the issue of operations occurring outside of the buffer in memory, allowing attackers to execute arbitrary code.
The vulnerability of Microsoft Office packages, Microsoft 365 Apps for Enterprise, and Microsoft SharePoint Enterprise Server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a malicious file...
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code within the sandbox.
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code within the sandbox through the created HTML page...
The vulnerability of the user interface of the WebUI on Google Chrome and Microsoft Edge browsers allows a hacker to perform domain substitution.
The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow a malicious actor to perform domain substitution using a created domain name...
The vulnerability of the TabGroups function in Google Chrome and Microsoft Edge browsers allows a hacker to replace the user interface.
The vulnerability of the TabGroups function in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to replace the user’s interface with malicious network traffic...
The vulnerability of the Tab Hover Cards component in Google Chrome and Microsoft Edge browsers allows a hacker to perform domain substitution attacks.
The vulnerability of the Tab Hover Cards component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace a domain name using a created domain name...
NULL Pointer Dereference in CRMF EncryptedValue Decryption
...
Possible NULL Dereference in Password-Based CMS Decryption
...
Out-of-Bounds Read in CMS Password-Based Decryption
...
Multi-RecipientInfo Bleichenbacher Oracle in CMS_decrypt() and PKCS7_decrypt()
...
Possible Heap Buffer Overflow in ASN.1 Multibyte String Conversion
...