CVE-2026-11255

Insufficient validation of untrusted input in Storage Access API in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Firefox

A security vulnerability in Thunderbird allowed malicious sites to use redirections to send credentialed requests to arbitrary endpoints on any site that had invoked the Storage Access API. This enabled potential Cross-Site Request Forgery attacks across origins. This vulnerability was fixed in...

The vulnerability of the Storage Access API interface of Mozilla Firefox and the Thunderbird email client allows a perpetrator to perform CSRF attacks.

The vulnerability of the Storage Access API interface of Mozilla Firefox and the Thunderbird email client is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack remotely...