CVE-2026-2345

Proctorio Chrome Extension is a browser extension used for online proctoring. The extension contains multiple window.addEventListener('message', ...) handlers that do not properly validate the origin of incoming messages. Specifically, an internal messaging bridge processes messages based solely on the presence of a fromWebsite property without verifying the event.origin attribute.

• CWE-346

• https://www.hckrt.com/hacktivity/46b61f36-b685-4667-aebf-82a67ad69ad6

Published

Feb 11, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-23444In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23445In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23446In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23447In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-23448In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-23449In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-23450In the Linux kernel, the following vulnerability has been re…9.8
• CVE-2026-23451In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-23452In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2026-23453In the Linux kernel, the following vulnerability has been re…7.5
• CVE-2026-23454In the Linux kernel, the following vulnerability has been re…7
• CVE-2026-23455In the Linux kernel, the following vulnerability has been re…9.1