583 matches found
oauth2-proxy
OAuth2 Proxy는 독립 실행형 리버스 프록시reverse proxy 또는 기존 리버스 프록시 및 로드 밸런서load balancer 설정에 통합되는 미들웨어 구성 요소로 작동할 수 있는 유연한 오픈 소스 도구입니다. OAuth2 / OIDC 인증을 통해 웹 애플리케이션을 보호하는 간단하고 안전한 방법을 제공합니다. 리버스 프록시로서 애플리케이션으로 향하는 요청을 가로채고 사용자를 OAuth2 제공업체로 리디렉션하여 인증을 수행합니다. 미들웨어로서 기존 인프라에 원활하게 통합되어 여러 애플리케이션에 대한 인증을 처리할 수...
Astra Linux – Vulnerability in Chromium
The use of after free in Web Authentication in Google Chrome before version 149.0.7827.155 allowed a remote attacker to execute arbitrary code through a crafted HTML page. Chromium security severity: Critical...
Astra Linux – Vulnerability in Chromium
Inappropriate implementations of WebAuthentication in Google Chrome prior to version 96.0.4664.45 allowed a remote attacker to leak cross-origin data through a crafted HTML page...
CVE-2026-87646
A flaw was found in Google Chrome's Web Authentication component. A remote attacker could exploit a use-after-free vulnerability by tricking a user into visiting a specially crafted HTML page. This could lead to the execution of arbitrary code outside of the browser's security sandbox...
CVE-2026-87561
A flaw was found in chromium-browser. A remote attacker could exploit incorrect authorization in Web Authentication by using a specially crafted Chrome extension. This could allow the attacker to bypass the web origin policy, potentially leading to unauthorized access or information disclosure...
CVE-2026-87646
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-87646
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2026-87561
Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-87561
Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-87561
Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-87646
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-87561
Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-87561
Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-87561
CVE-2026-87561 affects Google Chrome prior to 153.0.8010.36 , where an incorrect authorization in the Web Authentication component allowed a remote attacker to bypass the web origin policy via a crafted Chrome extension. Chromium rated the issue Low severity; NVD assigned a CVSS 3.1 base score of...
EUVD-2026-74437
Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...
CVE-2026-87646
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-87646
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-87646
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-87646
CVE-2026-87646 is a use-after-free vulnerability in Web Authentication in Google Chrome prior to 153.0.8010.36 , allowing a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. The CVSS v3.1 score is 9.6 (CRITICAL) with a changed scope (AV:N/AC:L/PR:N/UI:R/S:C/C:...
EUVD-2026-74508
Use after free in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...