14798 matches found
CVE-2026-87483
CVE-2026-87483 is an incorrect authorization vulnerability in Google Chrome on Android , affecting versions prior to 153.0.8010.36 . The flaw resides in the Browser component and allows a remote attacker to bypass system access restrictions by delivering a crafted HTML page. The Chromium project ...
CVE-2026-87548
CVE-2026-87548 is an improper state validation flaw in the Installer component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can leverage a crafted HTML page to bypass system access restrictions . Chromium rated the security severity as Medium . The fix is available in Chrom...
CVE-2026-87556
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87534
Missing authorization in the WebView component of Google Chrome on Android versions prior to 153.0.8010.36 allowed a remote attacker, leveraging social engineering, to bypass system access restrictions via crafted network traffic. The Chromium security severity is rated Medium . The fix is to upd...
EUVD-2026-74354
Missing authorization in WebView in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via crafted network traffic. Chromium security severity: Medium...
CVE-2026-87556
CVE-2026-87556 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can bypass system access restrictions by delivering a crafted HTML page to the victim. The NVD-assigned CVSS v3.1 score is 4.3 (Medium) , with a net...
CVE-2026-87513
CVE-2026-87513 is a missing authorization vulnerability in the ControlledFrame component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker leveraging social engineering can deliver a crafted HTML page that bypasses system access restrictions. The Chromium project as...
CVE-2026-87560
CVE-2026-87560 is a missing authorization vulnerability in the Browser component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit it by serving a crafted HTML page , enabling them to bypass system access restrictions . The NVD-assigned CVSS 3.1 score is 4.3 (Medium)...
CVE-2026-87645
CVE-2026-87645 is an improper state validation vulnerability in the Safebrowsing component of Google Chrome prior to version 153.0.8010.36 . A remote attacker could leverage a crafted HTML page to bypass system access restrictions . Chromium assigns this a Medium security severity. The fix is inc...
CVE-2026-87603
CVE-2026-87603 is a missing authorization vulnerability in the FileSystem component of Google Chrome prior to version 153.0.8010.36 . A remote attacker can exploit this via a crafted HTML page to bypass system access restrictions. The Chromium security team rates the severity as Medium . The fix ...
EUVD-2026-74321
Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
EUVD-2026-74531
Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. Chromium security severity: Medium...
CVE-2026-87569
Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...
CVE-2024-46658
CVE-2024-46658 Syrotech SY-GOPON-8OLT-L3 v1.6.0240629 Command Injection Vulnerability Usage 1- Edit the URL in the script. 2- Edit the CookieLogin value in the script. 3- Run the script, it will allow you to executing commands. Vulnerability Details GET...
PT-2026-88593
Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
The vulnerability of software platforms for developing and managing online stores like Magento Open Source, Adobe Commerce, and Adobe Commerce B2B lies in their inadequate authentication procedures, which allow attackers to bypass security restrictions.
The vulnerabilities of the software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B are related to deficiencies in authentication procedures. Exploiting these vulnerabilities can allow attackers to bypass security restriction...
PT-2026-88660
Missing authorization in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88648
Improper state validation in Installer in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
PT-2026-88745
Improper state validation in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...
wePWNise
wePWNise wePWNise is proof-of-concept Python script which generates VBA code that can be used in Office macros or templates. It was designed with automation and integration in mind, targeting locked down environment scenarios. The tool enumerates Software Restriction Policies SRPs and EMET...