CVE Vulnerability Catalog

An inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page.

Inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

An inappropriate implementation in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. The issue is rated as High severity by the Chromium security team.

An uninitialized use vulnerability in the ANGLE component of Google Chrome on Mac prior to version 150.0.7871.47 allows a remote attacker to leak cross-origin data via a crafted HTML page.

An inappropriate implementation in the Enterprise component in Google Chrome prior to 150.0.7871.47 allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

An inappropriate implementation in Autofill in Google Chrome on Android prior to version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. The issue is rated as High severity.

In Google Chrome on Android prior to version 150.0.7871.47, an inappropriate implementation in Extensions allowed an attacker who convinced a user to install a malicious extension to bypass the same origin policy via a crafted Chrome Extension.

An out-of-bounds read vulnerability in the Skia library in Google Chrome on Mac prior to version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page.

An inappropriate implementation in Passwords in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. The issue is rated as high severity.

Insufficient validation of untrusted input in File Input in Google Chrome on Android prior to version 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

Insufficient validation of untrusted input in Chrome for iOS prior to version 150.0.7871.47 allows a remote attacker to convince a user to perform specific UI gestures, leading to arbitrary script or HTML injection (UXSS) via a crafted HTML page.

Inappropriate implementation in Input in Google Chrome on Linux prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: High)

Side-channel information leakage vulnerability in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47. A remote attacker who compromised the renderer process could leak cross-origin data via a crafted HTML page.

Insufficient data validation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a local attacker to obtain potentially sensitive information from process memory via physical access to the device. (Chromium security severity: High)

Insufficient policy enforcement in Chrome for iOS prior to 150.0.7871.47 allows a remote attacker to bypass navigation restrictions via a crafted HTML page. The vulnerability has a Chromium security severity of High.

Insufficient policy enforcement in SVG in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

A side-channel information leakage vulnerability in the Scroll feature of Google Chrome prior to version 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. The issue is rated as High severity in Chromium security.

A vulnerability in Hono before version 4.10.2 (fixed in 4.10.3) in the CORS middleware causes the Vary header from the incoming request to be copied into the response when the origin is not set to "*". An attacker can supply arbitrary Vary values that are reflected in the response, leading to cache key pollution and inconsistent CORS enforcement in environments relying on shared caches or proxies.

Invoice Ninja up to version 5.13.26 contains an open redirect vulnerability in the client portal login. An unauthenticated attacker can redirect an authenticated victim to an attacker-controlled external URL by injecting a malicious value into the intended query parameter.

A broken access control vulnerability in the BPM module of yudao-cloud before version 2026.06 allows any authenticated user to access arbitrary process instance records by supplying a caller-controlled process-instance identifier to an unprotected GET endpoint lacking the @PreAuthorize annotation. Attackers can read sensitive workflow data including submitted form variables, approver identities, approval and rejection comments, and process BPMN XML without ownership or tenant party verification.