116874 matches found
kernel: scsi: target: iscsi: Validate CHAP_R length before base64 decode
A flaw was found in the Linux kernel's iSCSI target functionality. This vulnerability allows a remote attacker to cause a buffer overflow by sending a specially crafted Challenge-Handshake Authentication Authentication Protocol CHAP response. The system fails to validate the length of the...
CVE-2026-87597
A flaw was found in Google Chrome's CustomTabs component on Android. A remote attacker, by leveraging a co-installed application, could exploit a user interface UI misrepresentation vulnerability. This could allow the attacker to spoof the address bar, potentially deceiving users about the...
CVE-2026-87615
A flaw was found in Chromium. A race condition in the Payments component allows a remote attacker to spoof user interface UI elements. This vulnerability can be exploited by leveraging social engineering through a specially crafted HTML page, potentially misleading users...
CVE-2026-87532
A flaw was found in Google Chrome's Safebrowsing component. Improper state validation allows a remote attacker to bypass system access restrictions by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to system resources...
CVE-2026-87651
An incorrect authorization flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=550141694...
CVE-2026-87594
A flaw was found in Google Chrome's DataTransfer component. An issue with incorrect authorization could allow a remote attacker, who has already compromised the renderer process, to obtain sensitive information. This exploitation can occur by enticing a user to visit a specially crafted HTML page...
CVE-2026-87584
An incorrect authorization flaw was found in the WebUI component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=537466493...
DEBIAN-CVE-2026-87658
Information leak in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to obtain cross-origin data via a crafted Chrome extension. Chromium security severity: Medium...
DEBIAN-CVE-2026-87651
Incorrect authorization in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-87653
UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87653
UI misrepresentation in FullScreen in Google Chrome on on Windows prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87645
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87642
Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2026-87641
Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87641
Race condition in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87642
Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87645
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87637
Use after free in Extensions in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...