{"id":"CVE-2026-107024","kind":"vulnerability","aliases":["CVE-2026-107024"],"related":[],"title":"Share 2 Archive Today: crafted URL overwrites another user's clipboard","description":"Insecure permissions in Share 2 Archive Today versionCode 61 allows unauthorized attackers to arbitrarily overwrite another user's clipboard content via supplying a crafted URL.","summary":"Share 2 Archive Today version 61 has insecure permissions that let an unauthorized party overwrite another user's clipboard contents. An attacker gets the clipboard replaced by supplying a crafted URL.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["browser-extension","clipboard","other"],"not_affected_if":["other-versions"],"how_to_check":"- Check whether the installed Share 2 Archive Today extension is `versionCode 61`","fix":null,"status":"open","published_at":"2026-10-29T15:17:16+00:00","first_seen_at":"2026-10-29T15:25:38+00:00","triaged_at":"2026-10-29T15:27:10+00:00","updated_at":"2026-10-29T15:27:11+00:00","category":"other","confidence":0.5,"triage":{"at":"2026-10-29T15:27:10Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Share 2 Archive Today: crafted URL overwrites another user's clipboard","impact":"low","summary":"Share 2 Archive Today version 61 has insecure permissions that let an unauthorized party overwrite another user's clipboard contents. An attacker gets the clipboard replaced by supplying a crafted URL.","audience":"everyone","category":"other","nicknames":[],"who_cares":["browser-extension","clipboard"],"confidence":0.5,"fix_status":"unknown","needs_auth":"no","worst_case":"clipboard contents replaced by an attacker-supplied value","analyst_note":"Confirm the affected product type (browser extension) and whether a fixed version exists at the NVD entry or the vendor page.","how_to_check":"- Check whether the installed Share 2 Archive Today extension is `versionCode 61`\n- unknown beyond that; the sources do not say how to confirm the extension is present in a browser","plain_action":"If you use the Share 2 Archive Today browser extension, check its version and update it once the developer releases a fix; the sources do not name a fixed version.","needs_analyst":true,"not_affected_if":["other-versions"],"who_is_affected":"Users of the Share 2 Archive Today extension at versionCode 61, where a crafted URL can overwrite clipboard content. Teams that do not install this extension are not affected. The sources do not say whether other versions are affected.","user_interaction":"yes","needs_special_setup":"unknown","severity_if_unknown":"low"},"cost_usd":0.000676,"input_tokens":4092,"output_tokens":534,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-107024':14A,17A '-2026':13A,16A '2':2A,23B,57C '61':27B,61C 'allow':62C 'anoth':8A,37B,68C 'arbitrarili':66C 'archiv':3A,24B,58C 'attack':43B,64C 'browser':19B 'browser-extens':18B 'clipboard':11A,21B,40B,46B,71C 'content':41B,72C 'craft':5A,51B,76C 'cve':12A,15A 'extens':20B 'get':44B 'insecur':29B,53C 'let':32B 'overwrit':7A,36B,67C 'parti':35B 'permiss':30B,54C 'replac':47B 'share':1A,22B,56C 'suppli':49B,74C 'today':4A,25B,59C 'unauthor':34B,63C 'url':6A,52B,77C 'user':9A,38B,69C 'version':26B 'versioncod':60C 'via':73C","nicknames":[],"mitigations":[],"who_affected":"Users of the Share 2 Archive Today extension at versionCode 61, where a crafted URL can overwrite clipboard content. Teams that do not install this extension are not affected. The sources do not say whether other versions are affected.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"everyone","plain_action":"If you use the Share 2 Archive Today browser extension, check its version and update it once the developer releases a fix; the sources do not name a fixed version.","first_public_at":"2026-10-29T15:17:16+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-107024","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-107024","severity":null,"published_at":"2026-10-29T15:17:16+00:00","modified_at":"2026-10-29T15:17:16+00:00","first_seen_at":"2026-10-29T15:25:38+00:00","fetched_at":"2026-10-29T15:25:38+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}