CVE-2026-109750

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Site isolation issue in the DOM: Web Authentication component...

Web Authentication DoS

The vulnerability in the Web Authentication component of Google Chrome and Microsoft Edge web browsers is related to use-after-free memory usage. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Web Authentication Component Compromise

The vulnerability in the Web Authentication component of Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to compromise the integrity of protected information...

Linux Distros Unpatched Vulnerability : CVE-2026-109750

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158. CVE-2026-109750 Note that Nessus...

CVE-2026-104198 ZoneMinder failed token handling bypasses web authentication

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken returns false when a token is malformed or has an invalid signature, but the calle...

CVE-2026-104198 ZoneMinder failed token handling bypasses web authentication

ZoneMinder is a free, open source closed-circuit television software application. In versions 1.34.0 through 1.36.38, the web interface mishandles failed token authentication in web/includes/auth.php. validateToken returns false when a token is malformed or has an invalid signature, but the calle...

Astra Linux – Vulnerability in Chromium

Inappropriate implementations of WebAuthentication in Google Chrome prior to version 96.0.4664.45 allowed a remote attacker to leak cross-origin data through a crafted HTML page...

Astra Linux – vulnerability in Chromium

In WebAuthentication on Google Chrome for Android prior to version 91.0.4472.77, using “after free” allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

UBUNTU-CVE-2026-109750

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

SUSE CVE-2026-109750

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

Google Chrome Microsoft Edge Passkeys Security Keys Data Compromise

The vulnerability in the Web Authentication component Passkeys and Security Keys of Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protect...

Google Chrome Microsoft Edge Web Authentication Passkeys Security Keys Access

The vulnerability in the Web Authentication component Passkeys and Security Keys of Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

CVE-2026-109750

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109750

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109750

A site isolation issue exists in the DOM: Web Authentication component of Firefox and Thunderbird . This vulnerability was addressed in version 158 for both products. While the technical root cause is not detailed in the documents, the issue is associated with CWE-862 (Missing Authorization) and ...

CVE-2026-109750 Site isolation issue in the DOM: Web Authentication component

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109750 Site isolation issue in the DOM: Web Authentication component

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

EUVD-2026-98512

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

CVE-2026-109750

Site isolation issue in the DOM: Web Authentication component. This vulnerability was fixed in Firefox 158 and Thunderbird 158...

PT-2026-111471

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 158 Thunderbird versions prior to 158 Description A site isolation issue exists within the DOM Web Authentication component. Site isolation is a security mechanism that ensures web pages from different sites are...