https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T14:18:12.668879+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-06063 bdu:2021-06063 2026-10-03T14:18:12.747000+00:00 bdu:2021-06063 https://cve.radiocsirt.org/vuln/certfr-2020-avi-374 certfr-2020-avi-374 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro… 2026-10-03T14:18:12.747049+00:00 certfr-2020-avi-374 https://cve.radiocsirt.org/vuln/cnvd-2020-49891 cnvd-2020-49891 2026-10-03T14:18:12.747070+00:00 cnvd-2020-49891 https://cve.radiocsirt.org/vuln/euvd-2026-37432 EUVD-2026-37432 2026-10-03T14:18:12.747083+00:00 EUVD-2026-37432 https://cve.radiocsirt.org/vuln/fkie_cve-2020-6506 fkie_cve-2020-6506 2026-10-03T14:18:12.747094+00:00

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted HTML page.

 https://cve.radiocsirt.org/vuln/ghsa-36j3-xxf7-4pqg GHSA-36j3-xxf7-4pqg — Android WebView Universal Cross-site Scripting 2026-10-03T14:18:12.747124+00:00

Affected: npm: react-native-webview

A universal cross-site scripting (UXSS) vulnerability, CVE-2020-6506 (https://crbug.com/1083819), has been identified in the Android WebView system component, which allows cross-origin iframes to execute arbitrary JavaScript in the top-level document. This vulnerability affects React Native apps which use a `react-native-webview` that allows navigation to arbitrary URLs, and when that app runs on systems with an Android WebView version prior to 83.0.4103.106.

## Pending mitigation

Ensure users update their Android WebView system component via the Google Play Store to 83.0.4103.106 or higher to avoid this UXSS. 'react-native-webview' is working on a mitigation but it could take some time.

### References

https://alesandroortiz.com/articles/uxss-android-webview-cve-2020-6506/

 https://cve.radiocsirt.org/vuln/gsd-2020-6506 gsd-2020-6506 2026-10-03T14:18:12.747157+00:00 gsd-2020-6506 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0845-1 openSUSE-SU-2020:0845-1 — Security update for chromium 2026-10-03T14:18:12.747168+00:00

Security update for chromium

 https://cve.radiocsirt.org/vuln/rhsa-2020:2643 RHSA-2020:2643 — Red Hat Security Advisory: chromium-browser security update 2026-10-03T14:18:12.747188+00:00

chromium-browser: Use after free in speech chromium-browser: Insufficient policy enforcement in WebView chromium-browser: Out of bounds write in V8

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-6506 UBUNTU-CVE-2020-6506 2026-10-03T14:18:12.747206+00:00

Affected: Ubuntu:16.04:LTS: chromium-browser, Ubuntu:18.04:LTS: chromium-browser

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted HTML page.