SUSE CVE-2026-79183

Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. Chromium security severity: High...

SUSE CVE-2026-79204

UI misrepresentation in Input in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-79225

Incorrect authorization in Browser in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via UI Interaction. Chromium security severity: Low...

SUSE CVE-2026-79233

UI misrepresentation in CustomTabs in Google Chrome on on Android prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

SUSE CVE-2026-79250

UI misrepresentation in Navigation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

PT-2026-82623

Name of the Vulnerable Software and Affected Versions UI-TARS-desktop mcp-http-server version 1.2.4 prior to commit c2ad42e3eb9b27830db41a3e6f51ca7179d9b168 Description The startServer.ts file in the mcp-http-server package defaults the listen address to :: when no host is provided. This causes t...

PT-2026-82838

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware OS affected versions not specified Description A buffer overflow in the Management Web UI allows an authenticated administrator with network access to trigger a denial of service DoS condition or potentially execute arbitra...

CVE-2026-75548: Improper Restriction of Rendered UI Layers or Frames

The affected Ebyte device web management interface does not restrict the interface from being rendered within an external frame. An unauthenticated remote attacker could use a crafted webpage to mislead an authenticated administrator into initiating unintended configuration changes or disruptive...

CVE-2026-81735: Missing Authentication for Critical Function

startServer.ts in the mcp-http-server package of UI-TARS-desktop defaulted its listen address to '::' when no host was given, so startSseAndStreamableHttpMcpServer bound the Streamable HTTP and SSE MCP transports to every interface, and its authentication middleware was optional: middlewares are...

PT-2026-82586

openssl encrypt versions before 1.4.9 fail to sanitize recovery-slot metadata in the desktop GUI, allowing attackers to inject control characters and line separators into the irreversible-removal confirmation dialog. Attackers can craft encrypted files with malicious slot identifiers containing...

PT-2026-82850

WatchGuard Dimension's Web UI exposes an administrator passphrase change action that lacks CSRF protection. An attacker who can induce an authenticated global administrator's browser to visit a crafted link or page can change that administrator's passphrase to an attacker-chosen value without the...

GHSA-VFP3-V2GW-7WFQ vulnerabilities

Vulnerabilities for packages: temporal, kube-metrics-adapter, temporal-ui-server...

DRUPAL-CONTRIB-2026-117

Slick UI, a sub-module of Slick, enables you to add Slick option sets that may contain HTML for carousel buttons. Previous releases of the module did not sufficiently validate user input, leading to a Cross Site Scripting XSS vulnerability. Note: This vulnerability was fixed in 8.x-2.1 but that w...

SUSE CVE-2026-79283

UI misrepresentation in Geometry in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

SUSE CVE-2026-79284

UI misrepresentation in Core in Google Chrome on on Mac prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

Malicious code in svelte-vli-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69d1c24676b4273c3413856b424256c6ff7a437a48e7037156fa5f7f8911060 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

MAL-2026-14541 Malicious code in svelte-vli-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e69d1c24676b4273c3413856b424256c6ff7a437a48e7037156fa5f7f8911060 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

CVE-2026-79284

A flaw was found in chromium-browser. A remote attacker, after compromising the renderer process, could exploit this vulnerability by crafting a malicious HTML page. This would allow the attacker to spoof user interface UI elements, potentially deceiving users...

CVE-2026-79058

A flaw was found in the Passwords feature of Google Chrome. A remote attacker, after compromising the browser's renderer process, could exploit this missing authorization vulnerability. By using a specially crafted HTML page, the attacker could spoof user interface UI elements, potentially...

CVE-2026-79225

A flaw was found in chromium-browser. This incorrect authorization vulnerability allows a remote attacker to bypass system access restrictions. The attacker can achieve this by leveraging social engineering techniques through user interface UI interaction...