PULSEUnderground Intel

EN VIVO19señales / 24h

FEED

ransomn0n reclama a Company #98 · ET · Not Foundransomn0n reclama a Company #97 · TN · Not Foundransomn0n reclama a Company #96 · TT · Not Foundransomn0n reclama a Company #95 · CH · Not Foundransomanubis reclama a Fisher59 · Not Foundransompayload reclama a BW Office World · Retail & E-Commerceransompayload reclama a Brüninghoff Group · DE · Manufacturingransomglobal secret group reclama a Rosenberg & Pittinsky · US · Professional Servicesransomqilin reclama a Toyota Canarias · ES · Transportationransomlockbit5 reclama a chooseultimate.com · US · Retail & E-Commerceransomredact reclama a Baker Donelson · US · Professional Servicesransomn0n reclama a Vormittag Associates Inc · US · Not Foundransomglobal secret group reclama a Seminole Schools · US · Educationransomn0n reclama a Froggys Fog · US · Retail & E-Commerceransomn0n reclama a Company #98 · ET · Not Foundransomn0n reclama a Company #97 · TN · Not Foundransomn0n reclama a Company #96 · TT · Not Foundransomn0n reclama a Company #95 · CH · Not Foundransomanubis reclama a Fisher59 · Not Foundransompayload reclama a BW Office World · Retail & E-Commerceransompayload reclama a Brüninghoff Group · DE · Manufacturingransomglobal secret group reclama a Rosenberg & Pittinsky · US · Professional Servicesransomqilin reclama a Toyota Canarias · ES · Transportationransomlockbit5 reclama a chooseultimate.com · US · Retail & E-Commerceransomredact reclama a Baker Donelson · US · Professional Servicesransomn0n reclama a Vormittag Associates Inc · US · Not Foundransomglobal secret group reclama a Seminole Schools · US · Educationransomn0n reclama a Froggys Fog · US · Retail & E-Commerce

← Todos los CVEs

CVE Watch19 oct 2026

CVE-2026-109736

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 15

CVSS

8.1

Alto

EPSS

0.2%

p5

KEV

—

Exploit Today

1

0-100

Publicado: 13 oct 2026 · Última mod.: 19 oct 2026 · CWE-451

EPSS · 30d

0.2%EPSS · 30 días0.2%

2026-10-142026-10-19

Descripción técnica

Frame poisoning in the Layout component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.

Referencias oficiales

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1094344.3 MED

——0Fenrir Sleipnir Browser for Android before 3.9.0 contains a UI spoofing vulnerability that allows remote attackers to impersonate the browser's trusted address bar by entering fullscreen mode via the Fullscreen API without displaying a persistent notification or trusted-origin indicator. Attackers can render a counterfeit address bar showing a trusted origin over attacker-controlled content after a single user tap, enabling credential harvesting, malware delivery, or social engineering through fake login, update, or payment pages.19h CVE-2026-1097477.3 ALT

——1Other issue in the Address Bar component. This vulnerability was fixed in Firefox 158 and Thunderbird 158.1d CVE-2026-1093468.1 ALT

——6better-auth from 1.3.8-beta.3 before 1.7.0-rc.3 contains a UI misrepresentation vulnerability in the deviceAuthorization plugin because GET /device omits the requesting client_id and scope. Attackers can start a device request via /device/code, trick signed-in users into approving the code, then redeem it at /device/token for a live session token.4d CVE-2026-1063805.4 MED

——3UI misrepresentation in UI in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)14d CVE-2026-1063685.4 MED

——3UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)6d CVE-2026-106338—

——3UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. (Chromium security severity: Low)14d