CVE-2019-25718
Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the
CVSS
8.4
High
EPSS
0.1%
p2
KEV
—
Exploit Today
0
0-100
Published: Jun 1, 2026 · Last modified: Jul 22, 2026 · CWE-451
0.1%EPSS · 30 days0.1%
2026-09-262026-10-23
Dräger Infinity Explorer C700 contains a privilege escalation vulnerability that allows attackers to break out of kiosk mode and access the underlying operating system through a specific dialog interaction. Attackers can exploit this kiosk escape to take control of the operating system and cause the device to display incorrect or no information from the connected Delta Family patient monitor.
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-1094344.3 MED21.8%
——7Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attackers can render a counterfeit address bar showing a trusted origin over attacker-controlled content after a single user tap, enabling credential harvesting, malware delivery, or social engineering through fake login, update, or payment pages.5dCVE-2026-1097477.3 HIG19.7%
——6Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.6dCVE-2026-1097368.1 HIG24.2%
——7Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.6dCVE-2026-1093468.1 HIG19.2%
——6better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then redeem it at /device/token for a live session token.8dCVE-2026-1063805.4 MED10.8%
——3UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)18dCVE-2026-1063685.4 MED9.1%
——3UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)10d