163860 matches found
ROS-20260914-73-0018
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability could allow an attacker to compromise data integrity remotely...
ROS-20260914-73-0052
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ROS-20260914-73-0013
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
ROS-20260914-73-0015
The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ROS-20260914-73-0017
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
ROS-20260914-73-0019
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
ROS-20260914-73-0065
The vulnerability of the Compositing component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
ROS-20260914-73-0070
The vulnerability of the Paint component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...
ROS-20260914-73-0068
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...
The vulnerability of Microsoft Fabricās data management platform, related to the absence of authentication, allows attackers to escalate their privileges.
The vulnerability of the Microsoft Fabric data management platform is related to the absence of authentication. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...
The vulnerability of Microsoft Discovery Studioās research environment arises from the improper elimination of special elements in data queries, allowing an intruder to disclose protected information.
The vulnerability of the Microsoft Discovery Studio research environment is related to the improper elimination of special elements in data queries. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose protected information...
ROS-20260914-73-0037
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors in handling HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
ROS-20260914-73-0051
The vulnerability of the Downloads component in Google Chrome and Microsoft Edge is related to the user interfaceās false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...
KLA91280 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can be...
KLA91281 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security vulnerability can be...
ROS-20260914-73-0069
The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
ROS-20260914-73-0063
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Microsoft Edge (Chromium) < 153.0.4234.32 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 153.0.4234.32. It is, therefore, affected by multiple vulnerabilities as referenced in the September 15, 2026 advisory. - Incorrect authorization in SiteIsolation in Google Chrome prior to 153.0.8010.36 allowed a remot...
About Authentication Bypass - Microsoft SharePoint (CVE-2026-55040) vulnerability
About Authentication Bypass - Microsoft SharePoint CVE-2026-55040 vulnerability. SharePoint is a web application for corporate intranet portals, document management, and collaboration. This vulnerability was disclosed as part of the July Microsoft Patch Tuesday. A remote unauthenticated attacker...
Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data
Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam messages and using passkey-themed social engineering to breach cloud environments. The first campaign, per the tech giant, involved sending...