CVE-2026-40434

Anviz CrossChex Standard lacks source verification in the client/server channel, enabling TCP packet injection by an attacker on the same network to alter or disrupt application traffic...

Google Chrome Downloads Bypass

The vulnerability of the Downloads component in the Google Chrome browser is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions through a specially created HTML page...

Google Chrome Navigation XSS

The vulnerability of the Navigation components in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the page. Exploiting this vulnerability allows an attacker to bypass existing security restrictions by using a specially created HTML page...

WebKitGTK WebKit XSS

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to a lack of mechanisms for verifying the source of the data. Exploiting this vulnerability can allow an attacker to gain access to confidential data...