ROS-20260915-73-0008

The vulnerability of the CSS components in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

ROS-20260915-73-0134

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the inclusion of functionality from a unreliable management domain. Exploiting this vulnerability can allow an attacker to cause service interruptions...

ROS-20260915-73-0084

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML...

ROS-20260915-73-0136

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260915-73-0157

The vulnerability of the SVG component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

ROS-20260915-73-0159

The vulnerability of Google Chrome and Microsoft Edge web browsers relates to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...

ROS-20260915-73-0161

The vulnerability of the QUIC component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260915-73-0062

The vulnerability of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to bypass existing security mechanisms through the created HTML pages...

ROS-20260915-73-0137

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure...

ROS-20260915-73-0138

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260915-73-0033

The vulnerability of the Glic component in Google Chrome and Microsoft Edge is related to access control deficiencies. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...

ROS-20260915-73-0144

The vulnerability of the Printing component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

CVE-2026-58201: Server-Side Request Forgery (SSRF)

Lokka is a Model Context Protocol server for Microsoft 365, including Microsoft Graph and other services. Prior to 2.1.2, the Lokka-Microsoft tool in src/mcp/src/main.ts uses direct URL string concatenation to append the user-controlled path value to the management.azure.com base URL. A specially...

ROS-20260915-73-0022

The vulnerability of the Site Isolation component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

PT-2026-93216

Name of the Vulnerable Software and Affected Versions Microsoft Edge Chromium-based versions prior to 153.0.4234.32 Description A use-after-free issue allows an unauthorized attacker to elevate privileges from a Low to Medium Integrity Level within the sandbox over a network. This occurs when a...

CVE-2026-85893: Use After Free

Use after free in Microsoft Edge Chromium-based allows an unauthorized attacker to elevate privileges over a network...

KLA91288 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Edge...

ROS-20260915-73-0043

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure using a specially created video file...

ROS-20260915-73-0085

The vulnerability of the Permissions component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through a specially created HTML page...

ROS-20260915-73-0195

The vulnerability of the BrowserTag component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...