tag
Cross-Origin
High
WebKit WebGPU `importExternalTexture` Cross-Origin Video Frame Leak (CVE-2026-43700)
CVE-2026-43700·
WebKit / Safari (GPUDevice.importExternalTexture WebGPU API)
unpatched
High
WebKit Navigation API `NavigateEvent.sourceElement` Cross-Origin DOM Leak (CVE-2026-43735)
CVE-2026-43735·
WebKit / Safari (Navigation API — NavigateEvent.sourceElement)
unpatched
High
Sliver C2 MCP Server Unauthenticated CORS/Preflight Bypass (CVE-2026-34227)
CVE-2026-34227 (GHSA-6fpf-248c-m7wm)·
Sliver C2 framework — MCP (Model Context Protocol) server interface
unpatched
High
Realtime Collaboration Platform — CORS Misconfiguration Leading to Authenticated Data Exposure (CVE-2026-27579)
CVE-2026-27579 (GHSA-qh5m-p8jh-hx88)·
realtime-collaboration-platform (karnop), backed by Appwrite
unpatched