CVE-2019-5786

CVE-2019-5786 Chrome 72.0.3626.119 stable FileReader UaF exploit for Windows 7 x86. This exploit uses site-isolation to brute-force the vulnerability. iframe.html is the wrapper script that loads the exploit, contained in the other files, repeatedly into an iframe. host iframe.html on one site an...

CVE-2019-0808

CVE-2019-5786 and CVE-2019-0808 Chrome 72.0.3626.119 stable Windows 7 x86 exploit chain. This exploit uses site-isolation to brute-force CVE-2019-5786. host1wrapper/iframe.html is the wrapper script that loads the exploit repeatedly into an iframe. The actual chain resides in the host2singlerun...

CVE-2026-84140

CVE-2026-84140 is a site isolation issue in the DOM: Navigation component of Mozilla Firefox . The vulnerability was fixed in Firefox 155 and Firefox ESR 153.2 . Site isolation issues in Firefox typically involve cross-site information leakage where the DOM Navigation component fails to properly ...

EUVD-2026-69088

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2...

CVE-2026-84133

CVE-2026-84133 is a site isolation vulnerability in the DOM: Push Subscriptions component of Mozilla Firefox . The issue allows cross-site isolation to be bypassed through the Push Subscriptions API, potentially enabling an attacker to gain information or execute actions across site boundaries. T...

EUVD-2026-69081

Site isolation issue in the DOM: Push Subscriptions component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2...

CVE-2026-84129

CVE-2026-84129 is a site isolation issue in the DOM: Navigation component of Firefox . A site isolation flaw in the Navigation component can allow a compromised website to bypass isolation boundaries and interact with content from another site context. The vulnerability was fixed in Firefox 155 a...

EUVD-2026-69078

Site isolation issue in the DOM: Navigation component. This vulnerability was fixed in Firefox 155 and Firefox ESR 153.2...

Trespasser

CVE-2026-74970 · Firefox Fission site-isolation bypass via missing PipelineId namespace check This directory holds an honest reproduction scaffold for a Fission site-isolation authorization bypass in Firefox WebRender. Under Fission each content process owns a distinct PipelineId namespace, but t...

MiracleLinux 8 : firefox-140.14.0-1.el8_10.ML.1 (AXSA:2026-1703:21)

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1703:21 advisory. firefox: thunderbird: Mitigation bypass in the Data Loss Prevention component CVE-2026-74983 firefox: thunderbird: Site isolation issue in the...

CVE-2026-78941

A flaw was found in Google Chrome. A remote attacker, after compromising the renderer process, could exploit an information leak by using a specially crafted HTML page. This vulnerability allows the attacker to bypass site isolation, potentially leading to the disclosure of sensitive information...

CVE-2026-78903

A flaw was found in Google Chrome's Site Isolation feature. This vulnerability, caused by an incomplete cleanup process, could allow a remote attacker to bypass site isolation. To exploit this, the attacker must first compromise the browser's renderer process and then use a specially crafted HTML...

CVE-2026-79186

A flaw was found in Google Chrome's Network component. Incorrect authorization could allow a remote attacker, who has already compromised the renderer process, to bypass site isolation. This bypass is achieved by presenting a specially crafted HTML page, potentially leading to unauthorized access...

CVE-2026-79066

A flaw was found in Google Chrome. This improper input validation vulnerability in the Navigation component allows a remote attacker, who has already compromised the renderer process, to bypass site isolation. This can be achieved by crafting a malicious HTML page, potentially leading to...

CVE-2026-79053

A flaw was found in Lighthouse in Google Chrome. This missing authorization vulnerability allows a remote attacker, who has already compromised the renderer process and used social engineering, to bypass site isolation. This bypass is achieved by presenting a specially crafted HTML page to the...

CVE-2026-79002

A flaw was found in chromium-browser's SiteIsolation component. This incorrect authorization vulnerability allows a remote attacker, who has already compromised the renderer process, to bypass site isolation by using a specially crafted HTML page. This bypass could lead to further compromise of...

CVE-2026-79228

A flaw was found in Google Chrome. An incorrect authorization vulnerability within the Site Isolation feature allows a remote attacker, who has compromised the renderer process, to bypass site isolation. This can be achieved by a crafted HTML page, leading to unauthorized access to privileged pag...

CVE-2026-79203

A flaw was found in DevTools in Google Chrome. Improper input validation allows a remote attacker, who has already compromised the browser's rendering process, to bypass site isolation. Site isolation is a security feature designed to protect sensitive information by ensuring that content from...

CVE-2026-79103

A flaw was found in Google Chrome's Speech component. This vulnerability involves incorrect reference resolution, which a remote attacker can exploit to bypass site isolation. The attacker needs to have compromised the renderer process and then trick a user into visiting a specially crafted HTML...

Linux Distros Unpatched Vulnerability : CVE-2026-79053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged...