18569 matches found
CVE-2026-18215
Keycloak provides a way to let users log in using Microsoft accounts while restricting access to a specific organization tenant. A flaw was discovered where this restriction is ignored when using the token exchange feature. This means an attacker with a valid Microsoft token from a completely...
CVE-2026-16353 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2026-14538
CVE-2026-14538 : The bigquery-execute-sql tool in Google MCP Toolbox (versions 0.16.1–1.4.0) contains an improper authorization and security-boundary bypass. A fail-open flaw in the BigQuery dry-run validation allows an authenticated attacker to bypass allowedDatasets checks when the API returns ...
SUSE CVE-2026-17780
Inappropriate implementation in Isolated Web Apps in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2026-17782
Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 151.0.7922.72 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-17999
An incorrect security ui flaw was found in the PictureInPicture component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=521615681...
CVE-2026-18019
A side-channel information leakage flaw was found in the Media component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=525691898...
CVE-2026-18017
An use after free flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=523731236...
CVE-2026-17958
An inappropriate implementation flaw was found in the Views component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517538206...
CVE-2026-17974
An insufficient policy enforcement flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=519232592...
CVE-2026-17791
An insufficient validation of untrusted input flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514006959...
CVE-2026-17742
An insufficient policy enforcement flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499003233...
CVE-2026-17687
A type confusion flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516985726...
CVE-2026-17675
An out of bounds write flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513920258...
CVE-2026-17930
An insufficient validation of untrusted input flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513769158...
CVE-2026-17803
An insufficient validation of untrusted input flaw was found in the Save to Drive component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=515438919...
CVE-2026-17753
An inappropriate implementation flaw was found in the Autofill component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501628355...
CVE-2026-17809
An insufficient validation of untrusted input flaw was found in the Extensions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516813317...
CVE-2026-17792
An inappropriate implementation flaw was found in the Credential Management component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=514019823...