1982 matches found
Trespasser
CVE-2026-74970 · Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...
CVE-2019-0808
CVE-2019-5786 y CVE-2019-0808 Chrome 72.0.3626.119 stable Windows 7 x86 exploit chain. Este exploit utiliza el aislamiento de sitios para realizar fuerza bruta en CVE-2019-5786. host1wrapper/iframe.html es el script envoltorio que carga el exploit repetidamente en un iframe. La cadena real reside...
CVE-2019-5786
CVE-2019-5786 Chrome 72.0.3626.119 estable Exploit FileReader UaF para Windows 7 x86. Este exploit utiliza el aislamiento de sitios para forzar la vulnerabilidad. iframe.html es el script contenedor que carga el exploit, contenido en los otros archivos, repetidamente en un iframe. Aloja iframe.ht...
Linux Distros Unpatched Vulnerability : CVE-2026-93378
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site...
Linux Distros Unpatched Vulnerability : CVE-2026-93379
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium...
DEBIAN-CVE-2026-93378
Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...
CVE-2026-93378
Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...
CVE-2026-93379
Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...
CVE-2026-93378
Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...
CVE-2026-93378
Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...
CVE-2026-93378
Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...
EUVD-2026-82488
Missing authorization in Storage in Google Chrome prior to 153.0.8010.52 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted PDF file. Chromium security severity: Medium...
CVE-2026-93378
CVE-2026-93378 is a Missing Authorization flaw in the Storage component of Google Chrome prior to 153.0.8010.52 . A remote attacker who had already compromised the renderer process could exploit a crafted PDF file to bypass site isolation , rated Medium by Chromium (CVSS 3.1: 3.1/Low). The vulner...
CVE-2026-93379
Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...
CVE-2026-93379
CVE-2026-93379 is an incorrect authorization flaw in the ORB (Origin/Request Binding) component of Google Chrome prior to 153.0.8010.52 . A remote attacker can craft an HTML page to bypass site isolation , rated High by Chromium and 4.3 Medium by CVSS v3.1. The bug was reported by OGINOME Tomohit...
CVE-2026-93379
Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...
EUVD-2026-82482
Incorrect authorization in ORB in Google Chrome prior to 153.0.8010.52 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...
CVE-2026-92034
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the Graphics component...