114805 matches found
CVE-2026-106183: Missing Authorization
Missing authorization in Chromoting in Google Chrome on on Windows prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via crafted network traffic. Chromium security severity: Medium...
CVE-2026-106191: Missing Authorization
Missing authorization in Actor in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...
CVE-2026-106194: Missing Authorization
Missing authorization in WebAppInstalls in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...
PT-2026-106873
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the FileSystem component allows a remote attacker who has compromised the renderer process to bypass the web origin policy, which is a security mechanism that...
PT-2026-106880
Missing authorization in Passwords in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
PT-2026-106883
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A missing authorization in an API allows a remote attacker to leak sensitive information. This issue can be exploited through social engineering by using a crafted Chrome extension...
PT-2026-106923
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in Actor allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a crafted HTML...
PT-2026-106944
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in Workers allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted PDF file. Site isolation is a security...
PT-2026-106985
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the SignIn function allows a remote attacker to obtain sensitive information. This issue can be exploited through social engineering using a crafted Chrome...
PT-2026-107027
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the Media component allows a remote attacker who has compromised the renderer process to obtain sensitive information by using a crafted HTML page...
PT-2026-107034
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in DevTools allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin...
PT-2026-107035
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in FullScreen allows a remote attacker who has compromised the renderer process and used social engineering to bypass system access restrictions through a crafted...
PT-2026-107039
Missing authorization in Mobile in Google Chrome on on Android prior to 155.0.8059.39 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. Chromium security severity: Medium...
PT-2026-107059
Missing authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
PT-2026-106897
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in Google Lens allows a remote attacker who has compromised the renderer process to obtain cross-origin data through a crafted HTML page. Cross-origin data refers ...
CVE-2026-106224: Missing Authorization
Missing authorization in Google Lens in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...
Fedora 43 : python3.12 (2026-f30cb310f9)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-f30cb310f9 advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...
Oracle Linux 10 : nodejs22 (ELSA-2026-75864)
The remote Oracle Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2026-75864 advisory. 1:22.23.1-4.0.1 - Add c-ares as dependency orabug 39781219 Tenable has extracted the preceding description block directly from the Oracle Linux...
Fedora 45 : python3-docs / python3.15 (2026-ab1400e97a)
The remote Fedora 45 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2026-ab1400e97a advisory. New version of the Python interpreter Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has...
