2175 matches found
CVE-2026-16442: Origin Validation Error
A flaw was found in the SAML broker component of Keycloak, which is used to manage identity federation and user authentication. The issue occurs because the IdP-initiated Single Sign-On endpoint fails to check if a provider is restricted to account linking only. This allows an attacker with contr...
EUVD-2026-52521
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
EUVD-2026-52532
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering over a network...
EUVD-2026-52528
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-52533
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
EUVD-2026-52525
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
CVE-2026-66318
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
CVE-2026-66322
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66317
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering over a network...
CVE-2026-66316
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66313
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
CVE-2026-66322
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66317
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering over a network...
CVE-2026-66316
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform spoofing over a network...
CVE-2026-66313
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...
CVE-2026-66318
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to disclose information over a network...
netty-resolver-dns: Netty: Information disclosure and data manipulation due to improper CNAME record validation
A flaw was found in Netty's DnsResolveContext. This vulnerability allows a remote attacker to achieve information disclosure or data manipulation by crafting malicious DNS responses. The flaw occurs because the DnsResolveContext fails to validate the origin bailiwick of CNAME records in DNS...
PT-2026-67560
Origin validation error in Microsoft Edge Chromium-based allows an unauthorized attacker to perform tampering locally...