CVE-2026-106511

The MultiversX multisig-improved reference implementation (repository: mx-multisig-and-modules) contains a vulnerability in its on-chain multisig smart contract system . Due to a missing independent authorization check , any account assigned the Proposer role can perform actions that are explicit...

CVE-2026-106511 CVE-2026-106511

MultiversX's multisig-improved repository: mx-multisig-and-modules reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. Thi...

EUVD-2026-93662

MultiversX's multisig-improved repository: mx-multisig-and-modules reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. Thi...

CVE-2026-106511 CVE-2026-106511

MultiversX's multisig-improved repository: mx-multisig-and-modules reference implementation of their on-chain multisig smart contract system contains a vulnerability where a missing independent authorization check allows any account with the Proposer role to perform explicitly barred actions. Thi...

Kibana 9.4.0 Security Update (ESA-2026-191)

Missing Authorization in Kibana Leading to Information Disclosure Missing Authorization CWE-862 in Kibana can lead to information disclosure via Accessing Functionality Not Properly Constrained by ACLs CAPEC-1. An internal API surface within the Metrics Experience feature did not enforce a...

CVE-2026-106355

Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106355

Missing authorization in Media in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106288

A missing authorization flaw in the Browser component of Google Chrome (prior to version 155.0.8059.39 ) allows a remote attacker to bypass system access restrictions. The attack requires social engineering to trick a user into navigating to a crafted HTML page . No specific exploitation details ...

CVE-2026-106418

Missing authorization in Network in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...

CVE-2026-106288

Missing authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106362

Missing authorization in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-106187

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106187

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106250

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106250

Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106344

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Permissions . A remote attacker who has already compromised the renderer process and uses social engineering can use a crafted HTML page to bypass system access restrictions. The Chromium security seve...

CVE-2026-106250

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in the Actor component. A remote attacker could leverage social engineering to bypass system access restrictions by tricking a user into visiting a crafted HTML page . This issue has been addressed in the...

EUVD-2026-93595

Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-106312

Missing authorization in SignIn in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...

CVE-2026-106312

Google Chrome versions prior to 155.0.8059.39 are affected by a missing authorization flaw in the SignIn component. A remote attacker could leverage social engineering to deploy a crafted Chrome extension , which could then be used to obtain sensitive information . The vulnerability is categorize...