CVE-2026-19992— Orange View Limited DualSafe Password Manager & Digital Vault Extension postMessage-based Bridge information disclosure
Possible ATT&CK Techniques 1AI
T1564.004 · NTFS File AttributesAffected Version Matrix 36
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Orange View Limited | DualSafe Password Manager & Digital Vault Extension | 1.4.0 | affected |
1.4.1 | affected | ||
1.4.2 | affected | ||
1.4.3 | affected | ||
1.4.4 | affected | ||
1.4.5 | affected | ||
1.4.6 | affected | ||
1.4.7 | affected | ||
| … +28 more rows | |||
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-19992
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Orange View Limited DualSafe Password Manager & Digital Vault Extension postMessage-based Bridge information disclosure
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw has been found in Orange View Limited DualSafe Password Manager & Digital Vault Extension up to 1.4.35 on Chrome. Affected is an unknown function of the component postMessage-based Bridge. Executing a manipulation can lead to information disclosure. The attack can be launched remotely. A high complexity level is associated with this attack. The exploitability is told to be difficult. The exploit has been published and may be used. The vendor was contacted early about this disclosure.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
信息暴露
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Orange View Limited | DualSafe Password Manager & Digital Vault Extension | 1.4.0 | cpe:2.3:a:orange_view_limited:dualsafe_password_manager_digital_vault_extension:*:*:*:*:*:*:*:* |
II. Public POCs for CVE-2026-19992
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-19992
请登录查看更多情报信息。
Proof of Concept for CVE-2026-19992 (1)
IV. Related Vulnerabilities
Same weakness: CWE-200
- CVE-2026-53959
4gaBoards: Mass Information Disclosure (Internal PII Leakage - CVE-2026-76041
Chrome < 151.0.7922.169 信息泄露漏洞 - CVE-2026-62988
Froxlor: Credential and 2FA secret disclosure via Froxlor AP - CVE-2026-63640
MagicMirror socket payload secret placeholder expansion can - CVE-2026-75915
CodeWhale before 0.8.64 Environment Variable Leak via js_exe
V. Comments for CVE-2026-19992
No comments yet