https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T21:19:33.974602+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-118230 EUVD-2026-118230 2026-10-17T21:19:34.043608+00:00 EUVD-2026-118230 https://cve.radiocsirt.org/vuln/fkie_cve-2010-1236 fkie_cve-2010-1236 2026-10-17T21:19:34.043649+00:00

The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112, does not properly handle whitespace at the beginning of a URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted javascript: URL, as demonstrated by a \x00javascript:alert sequence.

 https://cve.radiocsirt.org/vuln/ghsa-qp79-v7x7-fmwp GHSA-qp79-v7x7-fmwp 2026-10-17T21:19:34.043698+00:00

The protocolIs function in platform/KURLGoogle.cpp in WebCore in WebKit before r55822, as used in Google Chrome before 4.1.249.1036 and Flock Browser 3.x before 3.0.0.4112, does not properly handle whitespace at the beginning of a URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted javascript: URL, as demonstrated by a \x00javascript:alert sequence.

 https://cve.radiocsirt.org/vuln/gsd-2010-1236 gsd-2010-1236 2026-10-17T21:19:34.043730+00:00 gsd-2010-1236