FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95374): chromium -- security fixes

Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2026-95361: Unintended Proxy or Intermediary

Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95361): chromium -- security fixes

Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95362): chromium -- security fixes

Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95352): chromium -- security fixes

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95297): chromium -- security fixes

Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

PT-2026-102843

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description Missing authorization in the Payments component allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. The web orig...

PT-2026-102853

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description Missing authorization in Cross-Origin Resource Sharing CORS, a mechanism that allows restricted resources on a web page to be requested from another domain, enables a remote attacker wh...

PT-2026-102862

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description Incorrect authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. SiteIsolation is a...

PT-2026-102861

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 154.0.8037.92 Description Cross-site scripting in the WebUI allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can intera...

PT-2026-108422

Security vulnerability affects the apache-hive package. Spring MVC applications using the functional web framework are vulnerable to stream corruption when using Server-Sent Events SSE...

CVE-2026-94952

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formPortFw port-forwarding configuration handler and is triggered by the ipsubnet and fwip request parameters during th...

EUVD-2026-89470

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formPortFw port-forwarding configuration handler and is triggered by the ipsubnet and fwip request parameters during th...

PT-2026-102475

An improper authorization vulnerability in the end-of-life versions of RTU500’s web application allows an authenticated user to trigger the RTU500 to reboot through the reset endpoint. Successful exploitation could cause temporary device unavailability and disruption of its intended operation...

CVE-2026-94953

A stack-based buffer overflow vulnerability exists in the web management interface of the TOTOLINK N150RT (NTR150) router running firmware version V3.4.0-B20201030 . The flaw is reachable via the /boafrm/formAjaxSet route specifically when using the topicurl=setting/setWiFiRepeaterConfig branch a...

CVE-2026-94953

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formAjaxSet using the topicurl=setting/setWiFiRepeaterConfig branch and the ApCliWEPKey field...

PT-2026-102803

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter access-control / URL filter configuration handler and is triggered by the url request parameter when the...

CVE-2026-94954

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter access-control / URL filter configuration handler and is triggered by the url request parameter when the...

EUVD-2026-89364

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formAjaxSet using the topicurl=setting/setWiFiRepeaterConfig branch and the ApCliWEPKey field...

CVE-2026-94954

A stack-based buffer overflow vulnerability exists in the web management interface of TOTOLINK N150RT NTR150 firmware V3.4.0-B20201030. It is reachable through the route /boafrm/formFilter access-control / URL filter configuration handler and is triggered by the url request parameter when the...