PULSEUnderground Intel

AO VIVO34sinais / 24h

FEED

ransomorova reclama a Herminio India Precision Technology · IN · Manufacturingransomkrybit reclama a Actualize Consulting · US · Professional Servicesransomclimax inc reclama a Redacted Redactedransomclimax inc reclama a Nepal Electricity Authority · NP · Energy & Utilitiesransomclimax inc reclama a Frolina Home · BR · Retail & E-Commerceransombooba project reclama a COMPUTER TASK GROUP, Inc. · US · Technologyransombooba project reclama a Georgetown Sleep Center · US · Healthcareransombooba project reclama a Collier Sports Medicine and Orthopedic Center · US · Healthcareransombooba project reclama a El Portal Imaging Center · MX · Healthcareransombooba project reclama a Day One RI · US · Professional Servicesransombooba project reclama a Acclaim Health · CA · Healthcareransominterlock reclama a Madison Honda · US · Retail & E-Commerceransominterlock reclama a Custom Floors Unlimited · US · Retail & E-Commerceransominterlock reclama a Meadows Valley School District · US · Educationransomorova reclama a Herminio India Precision Technology · IN · Manufacturingransomkrybit reclama a Actualize Consulting · US · Professional Servicesransomclimax inc reclama a Redacted Redactedransomclimax inc reclama a Nepal Electricity Authority · NP · Energy & Utilitiesransomclimax inc reclama a Frolina Home · BR · Retail & E-Commerceransombooba project reclama a COMPUTER TASK GROUP, Inc. · US · Technologyransombooba project reclama a Georgetown Sleep Center · US · Healthcareransombooba project reclama a Collier Sports Medicine and Orthopedic Center · US · Healthcareransombooba project reclama a El Portal Imaging Center · MX · Healthcareransombooba project reclama a Day One RI · US · Professional Servicesransombooba project reclama a Acclaim Health · CA · Healthcareransominterlock reclama a Madison Honda · US · Retail & E-Commerceransominterlock reclama a Custom Floors Unlimited · US · Retail & E-Commerceransominterlock reclama a Meadows Valley School District · US · Education

← Todos os CVEs

CVE Watch10 de nov. de 2026

CVE-2026-102236

Improper restriction of rendered ui layers or frames in Visual Studio Code allows an unauthorized attacker to bypass a security feature loca

CVSS

8.6

Alta

EPSS

—

KEV

—

Exploit Today

0

0-100

Publicado: 10 de nov. de 2026 · Última mod.: 10 de nov. de 2026 · CWE-1021

EPSS · 30d

Ainda não há histórico EPSS suficiente.

Descrição técnica

Improper restriction of rendered ui layers or frames in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Referências oficiais

msrc.microsoft.comhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-102236

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-181942.5 BAI

——0IBM App Connect Enterprise 13.0.1.0 through 13.0.8.2 could allow a remote attacker to perform unauthorized actions due to missing anti-clickjacking controls.6h CVE-2026-1235294.6 MÉD

——1Vikunja before 2.7.1 contains a stored CSS injection vulnerability that allows authenticated users with project write access to inject arbitrary CSS via unsanitized table-cell data-background-color attributes. Attackers can store crafted task descriptions or comments to render full-viewport phishing overlays or force zero-click outbound background-image requests that deanonymize viewers.4h CVE-2026-1238503.5 BAI

——3In JetBrains YouTrack before 2026.2.19422 cSS injection was possible in Mermaid diagrams via configuration directives4d CVE-2026-218343.1 BAI

——1HCL AION is affected by a vulnerability where the Content-Security-Policy (CSP) security response header was missing from application responses. Without this header, the browser does not restrict the sources of scripts and other content, increasing exposure to cross-site scripting and content-injection attacks, potentially resulting in unintended behavior or security impact under certain conditions.7h CVE-2026-1233115.3 MÉD

——1In JetBrains IntelliJ IDEA before 2026.3, 2026.2.4 command execution via a hidden run control in the Markdown preview was possible3h CVE-2026-181594.3 MÉD

——3A vulnerability in OpenText OpenText Directory Services (OTDS) on Windows and Linux allows Clickjacking. This issue affects OpenText Directory Services (OTDS): from 10.5 through 26.2.4d