CVE-2026-9216: Stack-based Buffer Overflow

An insufficient input validation vulnerability in the listed NETGEAR RAX series models allows a network-adjacent attacker having network access such as WiFi credentials to crash the router's management UI. There is no confidentiality or integrity impact. A crash of the router's management UI does...

ROS-20260908-73-0035

The vulnerability in Golang-X-Net is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to carry out a clickjacking attack...

PT-2026-88668

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in Chromium allows a remote attacker who has compromised the renderer process to spoof UI elements through the use of crafted network traffic. Recommendations...

PT-2026-88699

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in Interstitials allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version 153.0.8010.36 or...

PT-2026-88659

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the user interface allows a remote attacker to spoof UI elements via a crafted HTML page by leveraging social engineering. Recommendations Update Google Chrome t...

PT-2026-88733

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in Views, which allows a local attacker to execute arbitrary code outside the sandbox through UI Interaction. Use after free is a memory corruption flaw th...

PT-2026-88749

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A UI misrepresentation in the Downloads component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering and a crafted HTML pag...

PT-2026-88558

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in Geometry allows a remote attacker to spoof UI elements through a crafted HTML page by leveraging social engineering. Recommendations Update Google Chrome to...

PT-2026-88735

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in Payments allows a remote attacker to spoof UI elements through the use of a crafted HTML page. Recommendations Update Google Chrome to version 153.0.8010.36 or...

PT-2026-88562

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in FedCM Federated Credential Management, an API that allows users to sign into websites using their existing identity provider accounts allows a remote attacker to...

PT-2026-88565

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Downloads component allows a remote attacker who has compromised the renderer process to spoof UI elements by using a crafted HTML page. Recommendations...

PT-2026-88584

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in Geometry allows a remote attacker to spoof UI elements through a crafted HTML page by leveraging social engineering. Recommendations Update Google Chrome to...

PT-2026-88602

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A confused deputy issue in the Fullscreen feature allows a remote attacker to spoof UI elements using a crafted HTML page. This requires the attacker to have already compromised the...

PT-2026-88607

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the Downloads component allows a remote attacker to spoof UI elements using a crafted HTML page through social engineering. Recommendations Update Google Chrome ...

PT-2026-88753

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A UI misrepresentation issue in FullScreen mode on Windows allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version...

ROS-20260908-73-0080

The vulnerability of the Media component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace the user interface through a created HTML page...

PT-2026-88715

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A race condition in the Payments component allows a remote attacker to spoof UI elements using a crafted HTML page via social engineering. A race condition occurs when the timing or ord...

PT-2026-88601

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description UI misrepresentation in the Passwords component allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update Google Chrome to version 153.0.8010.36...

PT-2026-88626

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue exists in the Passwords component. This allows a remote attacker to potentially execute arbitrary code outside the sandbox through UI interaction, provided they c...

PT-2026-88572

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Improper input validation in FedCM Federated Credential Management, an API that allows users to sign into websites using their existing accounts from other providers allows a remote...