Information Disclosure Vulnerability in Orange View Limited DualSafe Password Manager & Digital Vault Extension
CVE-2026-19992

2.3LOW

Key Information:

Vendor: Orange View Limited
Status: Dualsafe Password Manager & Digital Vault Extension
Vendor: CVE Published:; 17 August 2026

🔔 Create Orange View Limited Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-19992?

A vulnerability has been identified in the Orange View Limited DualSafe Password Manager & Digital Vault Extension for Chrome, specifically within the postMessage-based bridge function. This flaw allows attackers to potentially manipulate the component, leading to unauthorized information disclosure. The attack is remote and has been documented in various security advisories. Although challenging to exploit, the risk associated with the published exploit necessitates immediate attention from users of affected versions, particularly those using the extension prior to version 1.4.35.

Affected Version(s)

DualSafe Password Manager & Digital Vault Extension 1.4.0

DualSafe Password Manager & Digital Vault Extension 1.4.1

DualSafe Password Manager & Digital Vault Extension 1.4.2

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-19992 - Proof of Concept