ROS-20260909-73-0149

The vulnerability of the UI components in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ROS-20260909-73-0166

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service interruptions...

Linux Distros Unpatched Vulnerability : CVE-2026-87615

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Payments in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HT...

Linux Distros Unpatched Vulnerability : CVE-2026-87624

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in Passwords in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to...

CVE-2026-21111: Out-of-bounds Write

Out-of-bounds write in libsthmbc.so prior to One UI 8.5 allows local attackers to write out-of-bounds memory...

CVE-2026-87633: Use After Free

Use after free in Views in Google Chrome prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

ROS-20260909-73-0165

The vulnerability of the Glic component in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Linux Distros Unpatched Vulnerability : CVE-2026-87540

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Isolated in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium...

CVE-2026-87599: Improper Input Validation

Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

Linux Distros Unpatched Vulnerability : CVE-2026-87599

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper input validation in Interstitials in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to spoof UI elements via a crafted HTML page...

PT-2026-88697

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description A UI misrepresentation in CustomTabs allows a remote attacker to spoof the address bar through a co-installed application. Recommendations Update Google Chrome on Android to...

CVE-2026-87432: Incorrect Authorization

Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...

firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...

bio-corgi (0.4.0), sepal-ui (>=2.10.1, <=2.10.2) potentially affected by CVE-2026-84379 via httpx2 (0.0.0)

httpx2 PYPI version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on httpx2 and may be impacted: - bio-corgi 0.4.0 - sepal-ui =2.10.1, =2.10.2 Source cves: CVE-2026-84379 Source advisory: OSV:GHSA-H4X7-GW46-3WM6...

firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...

CVE-2026-28630

In onCreate of ContactsPickerActivity.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28593

In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-28572

In onCreate of InstallLaunch.kt, there is a possible misleading UI due to a tapjacking/overlay attack. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2026-9216

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...