firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...

firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...

firefox: thunderbird: Information disclosure in the DOM: UI Events & Focus Handling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the DOM: UI Events & Focus Handling component...

PT-2026-88638

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A clickjacking issue in the Input component allows a remote attacker to spoof UI elements using a crafted HTML page. This exploitation requires the attacker to have already compromised...

Unauthenticated Control of NAT Rules Leading to Exposure of Sensitive Information

...

PT-2026-88565

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Downloads component allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page. Recommendations...

PT-2026-88602

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A confused deputy issue in the Fullscreen feature allows a remote attacker to spoof UI elements using a crafted HTML page. This requires the attacker to have already compromised the...

PT-2026-88584

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in Geometry allows a remote attacker to spoof UI elements through a crafted HTML page by leveraging social engineering. Recommendations Update Google Chrome to...

PT-2026-88668

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in Chromium allows a remote attacker who has compromised the renderer process to spoof UI elements through the use of crafted network traffic. Recommendations...

PT-2026-88753

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A UI misrepresentation issue in FullScreen mode on Windows allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version...

PT-2026-88562

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in FedCM Federated Credential Management, an API that allows users to sign into websites using their existing identity provider accounts allows a remote attacker to...

CVE-2026-86853: User Interface (UI) Misrepresentation of Critical Information

A malicious webpage could repeatedly trigger external URL schemes, causing system prompts or external application launches. This could make Firefox for iOS temporarily unusable until the page is closed. This vulnerability was fixed in Firefox for iOS 155.1...

ROS-20260908-73-0080

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the user interface through a created HTML page...

ROS-20260908-73-0037

The vulnerability in Golang-X-Net is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

PT-2026-88210

In getItemList of SettingsFragment.java, there is a possible user interaction bypass due to misleading or insufficient UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2026-88157

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...

PT-2026-88178

Samsung has detailed on its official website the September 2026 security patch with 90 vulnerability fixes for smartphones, tablets, and smartwatches in the Galaxy line. • The update package resolves flaws in the Android operating system, the One UI interface, and proprietary hardware components ...

CVE-2026-9216: Stack-based Buffer Overflow

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...

PT-2026-88749

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A UI misrepresentation in the Downloads component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering and a crafted HTML pag...

PT-2026-88699

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in Interstitials allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version 153.0.8010.36 or...