Skip to content
OpenAdvisories

Product · Tencent

BrowserSkill

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.6
    CVE-2026-94111

    Tencent BrowserSkill through 0.3.0 Origin Validation Error in Local WebSocket Daemon

    Tencent BrowserSkill through 0.3.0 contains an authentication bypass vulnerability in the local daemon WebSocket origin validation that accepts any chrome-extension origin with 32 characters in range a-p. Attackers can register a malicious extension as a brow…

    Tencent BrowserSkill