CVE-2026-79011

UI misrepresentation in Browser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: High...

Malicious code in dim-svelte-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46198c284561b470d637b4b03d0be89420c7f06c269360a900f3969f345bb6ca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14506 Malicious code in dim-svelte-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 46198c284561b470d637b4b03d0be89420c7f06c269360a900f3969f345bb6ca The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious code in svelte-cls-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3c51575af766a500130198af6b3b93efbc81f522edb9e0deec2a9da0a421db The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14511 Malicious code in svelte-cls-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ea3c51575af766a500130198af6b3b93efbc81f522edb9e0deec2a9da0a421db The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

shadcn-ui-lib (>=0.0.9, <=0.0.18) potentially affected by CVE-2026-55596 via @platejs/media (53.0.0)

@platejs/media NPM version 53.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on @platejs/media and may be impacted: - shadcn-ui-lib =0.0.9, =0.0.18 Source cves: CVE-2026-55596 Source advisory: OSV:GHSA-QJ6X-XX2H-8HVV...

Exploit for Improper Isolation or Compartmentalization in Mozilla Firefox

CVE-2026-4692 — content processes can declare themselves in RD...

BIT-KEYCLOAK-2026-11986 Keycloak-rest-admin-ui-ext: authorization bypass vulnerability in the admin-ui-ext bulk role-mapping-delete endpoints of keycloak

A flaw was found in the admin-ui-ext component of Keycloak, which provides extended administrative user interface capabilities. The issue occurs because certain bulk role-removal endpoints fail to perform granular permission checks when deleting role mappings. This allows a delegated administrato...

Malicious code in hydration-cls-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 01c60e3a0dd707077bad78ec7f0e5f79032dc9b86814d65bfd0083275a6059de The package advertises itself as a dependency-free streak/date-math library but ships an x8664 Linux ELF at dist/internal/calc.dat and auto-launches...

PT-2026-81581

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in Linux Toolkit Theming allows a remote attacker using social engineering to bypass system access restrictions through a crafted HTML page. Recommendations Update...

PT-2026-81607

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in the user interface allows a remote attacker to spoof UI elements through a crafted HTML page by leveraging social engineering. Recommendations Update Google Chro...

PT-2026-81684

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in the PermissionElement allows a remote attacker to spoof UI elements through a crafted HTML page by leveraging social engineering. Recommendations Update Google...

PT-2026-81609

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A UI misrepresentation in the browser allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering and a crafted HTML page...

PT-2026-81838

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A UI misrepresentation issue in the Core component allows a remote attacker who has already compromised the renderer process to spoof UI elements. This is achieved by using a specially...

PT-2026-81740

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description UI misrepresentation in CustomTabs allows a remote attacker to spoof UI elements through a crafted HTML page by leveraging social engineering. Recommendations Update Google...

PT-2026-81733

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in WebAppInstalls allows a remote attacker to spoof UI elements through the use of a crafted HTML page. Recommendations Update Google Chrome to version 152.0.7977.6...

PT-2026-81837

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description A UI misrepresentation in Geometry allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update to version 152.0.7977.65 or later...

PT-2026-81731

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in DevTools allows a remote attacker to obtain sensitive information through UI Interaction by leveraging social engineering. Recommendations Update Google Chrome ...

PT-2026-81793

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description UI misrepresentation in CustomTabs allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update Google Chrome on Android to version...

PT-2026-81542

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description UI misrepresentation in the browser allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version 152.0.7977.65 or later...