A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private conversations, researchers at the security firm Parameter showed. The researchers reported the flaw through OpenAI's bug bounty program on October 18, and OpenAI fixed it eight days later and rated it... Weiterlesen: A Shared ChatGPT Link Could Run Attacker Code in Your Session and Rea…
Intelligence View
⚡ tsecurity.de Intelligence
A Shared ChatGPT Link Could Run Attacker Code in Your Session and Read Private Chats
A malicious ChatGPT share link could run an attacker's code in the logged-in session of anyone who opened it, allowing them to read their private…
Social ReaktionenReagiere als Erste:r — dein Feedback zählt!
Powered by tsecurity.de
tsecurity.de Hub
Intelligence Digest gratis Dagelijks het belangrijkste beveiligingsnieuws · kan op elk moment worden opgehaald
Community Rating & Social Proof
⭐ Leser-Wertung
–
Ø / 5.0
★★★★★
Nog geen recensies van lezers
Was deze pagina nuttig?
0
Powered by tsecurity.de
tsecurity.de Hub
Verwant Story Cluster & Sources (vector AI)
12 Bronnen
CVE-2026-106207 | Google Chrome up to 154.0.8037.97 V8 race condition (WID-SEC-2026-3761)
11 andere bronnen
VVulDB Updates5 uur geledenCVE-2026-106209 | Google Chrome up to 154.0.8037.97 Mobile clickjacking (WID-SEC-2026-3761) VVulDB Updates5 uur geledenCVE-2026-106210 | Google Chrome up to 154.0.8037.97 Scroll information disclosure (WID-SEC-2026-3761) VVulDB Updates5 uur geledenCVE-2026-106213 | Google Chrome up to 154.0.8037.97 WebAudio race condition (WID-SEC-2026-3761) VVulDB Updates5 uur geledenCVE-2026-106211 | Google Chrome up to 154.0.8037.97 TabStrip use after free (WID-SEC-2026-3761) VVulDB Updates5 uur geledenCVE-2026-106214 | Google Chrome up to 154.0.8037.97 Proxy information disclosure (WID-SEC-2026-3761) VVulDB Updates5 uur geledenCVE-2026-106215 | Google Chrome up to 154.0.8037.97 ANGLE uninitialized resource (WID-SEC-2026-3761)
+5
9 Bronnen
CVE-2026-109715 | Mozilla Firefox up to 115.42/153.4/157 JavaScript Engine integer overflow (Nessus ID 374794)
8 andere bronnen
VVulDB Updates36 min. geledenCVE-2026-109740 | Mozilla Firefox up to 153.4/157 Win32 sandbox (Nessus ID 374794) VVulDB Updates36 min. geledenCVE-2026-109706 | Mozilla Firefox up to 115.42/153.4/157 IndexedDB use after free (Nessus ID 374794) VVulDB Updates36 min. geledenCVE-2026-109724 | Mozilla Firefox up to 153.4/157 DOM/HTML use after free (Nessus ID 374794) VVulDB Updates36 min. geledenCVE-2026-109713 | Mozilla Firefox up to 153.4/157 Crash Reporting use after free (Nessus ID 374794) VVulDB Updates36 min. geledenCVE-2026-109745 | Mozilla Firefox up to 153.4/157 Web Serial uninitialized pointer (Nessus ID 374794) VVulDB Updates36 min. geledenCVE-2026-109709 | Mozilla Firefox up to 153.4/157 Process Sandboxing privileges management (Nessus ID 374794)
+2
9 Bronnen
CVE-2026-92162 | Flatpak up to 1.18.0 flatpak-system-helper privileges management (Nessus ID 374780)
8 andere bronnen
VVulDB Updates3 uur geledenCVE-2026-96281 | Red Hat Enterprise Linux System Helper RemoveLocalRef privileges management (EUVD-2026-88027 / Nessus ID 374780) VVulDB Updates2 uur geledenCVE-2026-66069 | RabbitMQ up to 4.1.12/4.2.6/4.2.x Management Plugin rabbit_mgmt_wm_reset.erl is_authorized privileges management (WID-SEC-2026-2268) VVulDB Updates2 uur geledenCVE-2026-66067 | VMware RabbitMQ up to 4.2.6/4.3.0 Stream Open privileges management VVulDB Updates4 uur geledenCVE-2026-65959 | vitessio Vitess up to 24.0.2 Debug Endpoint vrlog.go vrlogStatsHandler privileges management VVulDB Updates4 uur geledenCVE-2026-81627 | Red Hat Enterprise Linux VAPIC hw/i386/vapic.c privileges management (EUVD-2026-82872) VVulDB Updates4 uur geledenCVE-2026-69399 | Microsoft Azure Arc privileges management
+2
Mehr aus dieser Kategorie
Blättern: Pfeiltasten [ ← ] [ → ] · Tasten j / k · mobil: Wischen
HAND-OFF
Auf Smartphone übergeben (ADVISORY)
Scannen Sie den QR-Code mit der Smartphone-Kamera für sofortigen mobilen Zugriff:
https://tsecurity.de/nl/4310480/it-beveiligingsnieuws/a-shared-chatgpt-link-could-run-attacker-code-in-your-session-and-read-private-chats/