CVE-2019-14287-IT18030372-

CVE-2019-14287-IT18030372- Vulnerabilidade de bypass da política de segurança do Sudo...

Super-UEFIinSecureBoot-Disk

Super UEFIinSecureBoot Disk Super UEFIinSecureBoot Disk é uma imagem inicializável prova de conceito não mantida ou aprimorada ativamente com o carregador de inicialização GRUB2 projetada para ser usada como base para unidades USB flash de recuperação. Característica principal: o disco é totalmen...

CVE-2026-65092

NVIDIA OpenShell Sandbox for Linux is affected by a path traversal vulnerability that allows bypassing its L7 REST network policy . An attacker with network access and low privileges can exploit this to achieve information disclosure and data tampering . The CVSS v3.1 base score is 8.5 (HIGH) , w...

EUVD-2026-66091

NVIDIA OpenShell Sandbox for Linux contains a vulnerability where an attacker could cause a path traversal bypass of L7 REST network policy. A successful exploit of this vulnerability might lead to information disclosure and data tampering...

CVE-2026-78980

CVE-2026-78980 is an improper input validation vulnerability in the ReaderMode component of Google Chrome prior to version 152.0.7977.65 . A remote attacker, leveraging social engineering, can exploit a crafted HTML page to bypass the web origin policy and gain access to a privileged page. Chromi...

CVE-2026-78947

CVE-2026-78947 is an incomplete cleanup vulnerability in Chromium , affecting Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , could use a crafted Chrome extension to bypass the web origin policy . Chromium rated the security severity as Low . The fix is t...

CVE-2026-79060

CVE-2026-79060 is an incorrect authorization flaw in the StorageAccessAPI component of Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass web origin policy , potentially gainin...

CVE-2026-79123

Google Chrome on Windows , prior to version 152.0.7977.65 , contains an improper input validation flaw in the NTP Footer component. A remote attacker who has already compromised the renderer process can exploit this via a crafted HTML page to bypass the web origin policy . Chromium rated the secu...

CVE-2026-79005

CVE-2026-79005 is an incorrect authorization flaw in the StorageAccessAPI component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit this by serving a crafted HTML page to bypass the web origin policy . The Chromium securit...

CVE-2026-79273

CVE-2026-79273 is an incorrect reference resolution vulnerability in WebView within Google Chrome on Android prior to version 152.0.7977.65 . A remote attacker could potentially bypass the web origin policy by serving a crafted HTML page to a victim. Chromium rates the security severity as Low . ...

CVE-2026-79243

CVE-2026-79243 is an improper input validation flaw in the ReadingList component of Google Chrome on Windows , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass web origin policy . Chromium a...

CVE-2026-79261

An incorrect authorization flaw in the Controls component of Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to bypass the web origin policy by delivering a crafted HTML page. The Chromium project classified this issue with a Low security severity. No exploitation details o...

CVE-2026-79000

CVE-2026-79000 is a low-severity improper input validation vulnerability in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 . A remote attacker, leveraging social engineering , can craft network traffic to bypass the web origin policy . The Chromium project classifies the se...

CVE-2026-79185

CVE-2026-79185 is an information leak in the DOM of Google Chrome prior to 152.0.7977.65 . A remote attacker could exploit this vulnerability via a crafted HTML page to bypass the web origin policy , potentially exposing data that should be isolated between origins. Chromium rates the severity as...

CVE-2026-79068

Google Chrome prior to 152.0.7977.65 is affected by an improper resource exposure in the StreamsAPI component. A remote attacker can potentially bypass the web origin policy into a privileged page by delivering a crafted HTML page. Chromium rates this as Medium severity. Remediation is to update ...

CVE-2026-79178

CVE-2026-79178 is an incorrect authorization flaw in Web Authentication (Passkeys & Security Keys) within Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it via a crafted HTML page to bypass the web origin policy , potentially gaining unauthorized access to WebAuthn credentia...

CVE-2026-79205

CVE-2026-79205 is an incorrect authorization vulnerability in the Network component of Google Chrome prior to version 152.0.7977.65 . A remote attacker could exploit this via a crafted HTML page to bypass the web origin policy , potentially allowing unauthorized cross-origin access. Chromium rate...

CVE-2026-79070

CVE-2026-79070 is an incorrect reference resolution flaw in the Cache component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit this via a crafted HTML page to bypass the web origin policy , rated Medium severity by Chromium. The fix is available in Chrome 152.0.7977.65. N...

CVE-2026-78976

CVE-2026-78976 is an improper input validation flaw in StorageAccessAPI within Google Chrome , affecting versions prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit this via a crafted HTML page to bypass the web origin policy . Chromium rates...

CVE-2026-79214

CVE-2026-79214 is an improper input validation vulnerability in the Preload component of Google Chrome prior to 152.0.7977.65 . A remote attacker who had already compromised the renderer process could exploit this flaw via a crafted HTML page to bypass the web origin policy , potentially accessin...