CVE-2026-19992
LowCVSS 3.1Exploitation Probability (EPSS)
Low risk23th percentile - higher than 23% of all known CVEs
Summary
Vulnerability in DualSafe Password Manager & Digital Vault extension up to 1.4.35 on Chrome, affecting an unknown function of the postMessage-based Bridge component. Manipulation leads to information disclosure. The attack can be launched remotely but is difficult to exploit. The exploit has been published.
Risk Assessment
An attacker could access sensitive data stored in the password manager, potentially compromising user account security.
Recommendation
Update the extension to the latest version as soon as available. Limit usage to trusted environments.
Original NVD description (English source)
A flaw has been found in Orange View Limited DualSafe Password Manager & Digital Vault Extension up to 1.4.35 on Chrome. Affected is an unknown function of the component postMessage-based Bridge. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is told to be difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure.