41598 matches found
Linux Distros Unpatched Vulnerability : CVE-2026-87615
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HT...
PT-2026-88662
Name of the Vulnerable Software and Affected Versions Google Chrome for Mac versions prior to 153.0.8010.36 Description An incorrect reference resolution in the Accessibility component allows a remote attacker to potentially spoof UI elements by using a crafted HTML page. Recommendations Update...
PT-2026-88683
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description UI misrepresentation in the Passwords component allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome on Android to...
CVE-2026-87445: User Interface (UI) Misrepresentation of Critical Information
UI misrepresentation in Session in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
Linux Distros Unpatched Vulnerability : CVE-2026-87562
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect reference resolution in Accessibility in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to potentially spoof UI elements via...
PT-2026-88845
Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory...
Linux Distros Unpatched Vulnerability : CVE-2026-87496
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a craft...
Linux Distros Unpatched Vulnerability : CVE-2026-87507
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a...
CVE-2026-87526: Use After Free
Use after free in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: Medium...
CVE-2026-87567: User Interface (UI) Misrepresentation of Critical Information
UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. Chromium security severity: Medium...
CVE-2026-87501: User Interface (UI) Misrepresentation of Critical Information
UI misrepresentation in Passwords in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...
Linux Distros Unpatched Vulnerability : CVE-2026-87540
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium...
CVE-2026-87568: Improper Input Validation
Improper input validation in Chromium in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via crafted network traffic. Chromium security severity: Low...
ROS-20260909-73-0129
The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially created HTML page...
firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...
firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...
bio-corgi (0.4.0), sepal-ui (>=2.10.1, <=2.10.2) potentially affected by CVE-2026-84382 via httpx2 (0.0.0)
httpx2 PYPI version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpx2 and may be impacted: - bio-corgi 0.4.0 - sepal-ui =2.10.1, =2.10.2 Source cves: CVE-2026-84382 Source advisory: OSV:GHSA-8XX6-HGC6-GC2M...
bio-corgi (0.4.0), sepal-ui (>=2.10.1, <=2.10.2) potentially affected by CVE-2026-84380 via httpx2 (0.0.0)
httpx2 PYPI version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpx2 and may be impacted: - bio-corgi 0.4.0 - sepal-ui =2.10.1, =2.10.2 Source cves: CVE-2026-84380 Source advisory: OSV:GHSA-PF96-P4FJ-6566...
bio-corgi (0.4.0), sepal-ui (>=2.10.1, <=2.10.2) potentially affected by CVE-2026-84379 via httpx2 (0.0.0)
httpx2 PYPI version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpx2 and may be impacted: - bio-corgi 0.4.0 - sepal-ui =2.10.1, =2.10.2 Source cves: CVE-2026-84379 Source advisory: OSV:GHSA-H4X7-GW46-3WM6...
firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...