CVE-2026-19992 | Orange View Limited DualSafe Password Manager & Digital Vault Extension postMessage-based Bridge information disclosure

A vulnerability was found in Orange View Limited DualSafe Password Manager & Digital Vault Extension up to 1.4.35 on Chrome and classified as problematic. Affected is an unknown function of the component postMessage-based Bridge. Executing a manipulation can lead to information disclosure.

This vulnerability is tracked as CVE-2026-19992. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure.VulDB Recent EntriesRead More