221294 matches found
CVE-2026-106296
An improper privilege management flaw was found in the UI component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/540078886...
CVE-2026-106264
A missing authorization flaw was found in the Web Authentication Passkeys & Security Keys component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533084756...
CVE-2026-106249
An incorrect authorization flaw was found in the Autofill component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/552440317...
CVE-2026-106259
An incorrect authorization flaw was found in the PermissionElement component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/540076586...
CVE-2026-106237
An information leak flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553255283...
CVE-2026-106247
A buffer overflow flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/524435922...
CVE-2026-106220
An information leak flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/534843648...
CVE-2026-106192
An information leak flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/524681280...
CVE-2026-106340
A missing authorization flaw was found in the CredentialProvider component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/503794852...
CVE-2026-106422
An incorrect authorization flaw was found in the API component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/519458746...
CVE-2026-106362
A missing authorization flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/514456975...
CVE-2026-106427
A confused deputy flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513423334...
CVE-2026-106353
An improper input validation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502078791...
CVE-2026-106179
An ui misrepresentation flaw was found in the WebAppInstalls component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553250818...
CVE-2026-106317
An ui misrepresentation flaw was found in the FullScreen component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/450323465...
CVE-2026-106394
An incomplete cleanup flaw was found in the Glic component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513122002...
CVE-2026-106260
An incorrect authorization flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513821237...
CVE-2026-106287
An information loss flaw was found in the CORS component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513518289...
CVE-2026-106312
A missing authorization flaw was found in the SignIn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502111211...
CVE-2026-106299
An improper input validation flaw was found in the WebAudio component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/519211890...
CVE-2026-106344
A missing authorization flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/498375898...
CVE-2026-106306
An incorrect authorization flaw was found in the DevTools component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513383360...
CVE-2026-106338
An ui misrepresentation flaw was found in the PictureInPicture component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/448789663...
CVE-2026-106309
An incorrect authorization flaw was found in the Selection component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/503708636...
CVE-2026-106276
An ui misrepresentation flaw was found in the Payments component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/417555081...
CVE-2026-106199
An incorrect authorization flaw was found in the Actor component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/517703787...
CVE-2026-106187
A missing authorization flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/511776800...
CVE-2026-106252
An incorrect comparison flaw was found in the Fonts component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513446410...
CVE-2026-106386
An uninitialized resource flaw was found in the WebAudio component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553156221...
CVE-2026-106210
An observable discrepancy flaw was found in the Scroll component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/556304559...
CVE-2026-106061
A flaw was found in GIMP’s X cursor XMC thumbnail loader. When GIMP generates a thumbnail for a crafted XMC file, it allocates a pixel buffer using a width height size computed in 32-bit signed arithmetic. If that product overflows, the allocation is smaller than the true image extent. A subseque...
CVE-2026-106401
An out of bounds write flaw was found in the Media component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/553129739...
CVE-2026-106375
An incomplete cleanup flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/536507840...
CVE-2026-106388
A missing authorization flaw was found in the DataTransfer component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/550512266...
CVE-2026-106336
An observable discrepancy flaw was found in the Paint component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/522722456...
CVE-2026-106232
An ui misrepresentation flaw was found in the Browser component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/522299740...
CVE-2026-106279
An incorrect reference resolution flaw was found in the Passwords component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/513757840...
CVE-2026-106408
A protection mechanism failure flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/504227656...
CVE-2026-106414
An improper input validation flaw was found in the Mobile component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/504223609...
CVE-2026-106244
An incorrect authorization flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/502475175...
CVE-2026-106242
An information leak flaw was found in the Omnibox component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/501647772...
CVE-2026-106412
A race condition flaw was found in the Core component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/520755056...
CVE-2026-106471
A flaw was found in Candlepin. The central authorization filter incorrectly grants access when any one of multiple @Verify-annotated parameters is accessible, instead of requiring access to every verified entity. A low-privilege authenticated attacker who can access the first referenced object ca...
CVE-2026-106243
An incomplete cleanup flaw was found in the Proxy Auth component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533426590...
CVE-2026-106239
An integer overflow flaw was found in the WebGL component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/546630009...
CVE-2026-106214
An information leak flaw was found in the Proxy component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/533493992...
CVE-2026-106454
A flaw was found in Twisted. An authenticated remote attacker can cause a Denial of Service DoS by submitting specially crafted mailbox search queries using Internet Message Access Protocol IMAP commands such as LIST or LSUB. Because the server fails to properly sanitize these search patterns...
CVE-2026-106444
A flaw was found in Handlebars. This vulnerability allows a remote attacker to execute arbitrary script code through Cross-Site Scripting XSS. When an application precompiles untrusted template text and embeds the generated output directly into an inline web script block, static content is not...
CVE-2026-106550
A flaw was found in convict. An attacker capable of submitting untrusted configuration keys can bypass property filters within the config.set function to modify base JavaScript objects. This prototype pollution allows the attacker to alter fundamental language methods, causing persistent...