oauth2-proxy

OAuth2 Proxy es una herramienta flexible de código abierto que puede actuar como un proxy inverso independiente o como un componente de middleware integrado en configuraciones existentes de proxy inverso o balanceadores de carga. Proporciona una forma simple y segura de proteger tus aplicaciones...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys...

Linux Distros Unpatched Vulnerability : CVE-2026-106264

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via ...

DEBIAN-CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

EUVD-2026-93616

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

CVE-2026-106264

Google Chrome versions prior to 155.0.8059.39 are vulnerable to a missing authorization flaw in Web Authentication (Passkeys & Security Keys) . This security issue allows a remote attacker to spoof UI elements when a user visits a crafted HTML page. The chromium security severity for this vulnera...

PT-2026-106937

Missing authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations of WebAuthentication in Google Chrome prior to version 96.0.4664.45 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

The use of after free in Web Authentication in Google Chrome before version 153.0.8010.36 allowed a remote attacker to execute arbitrary code outside the sandbox through a crafted HTML page. Chromium security severity: High...

Astra Linux – Vulnerability in Chromium

The use of “after free” in Web Authentication in Google Chrome before version 151.0.7922.109 allowed a remote attacker to potentially perform a sandbox escape through a crafted HTML page. Chromium security severity: High...

CVE-2026-79108

A flaw was found in Google Chrome's Web Authentication Passkeys & Security Keys feature. A remote attacker could leverage social engineering techniques by presenting a crafted HTML page to a user. This misrepresentation in the user interface could allow the attacker to bypass system access...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

Astra Linux – Vulnerability in Chromium

Incorrect authorization in Web Authentication in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...

Astra Linux – Vulnerability in Chromium

UI misrepresentation in Web Authentication Passkeys & Security Keys in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to leverage social engineering to bypass system access restrictions through a crafted HTML page. Chromium security severity: Low...

Chromium CVE-2026-87646: Use after free in Web Authentication

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium CVE-2026-87561: Incorrect authorization in Web Authentication

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...