Lucene search
+L

702 matches found

OSV
OSV
added yesterday5 views

DEBIAN-CVE-2026-16417

Uninitialized Use in Skia in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

5.3AI score
Exploits0References1
OSV
OSV
added yesterday5 views

DEBIAN-CVE-2026-16413

Out of bounds write in ANGLE in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

5.4AI score
Exploits0References1
Nuclei
Nuclei
added yesterday19 views

Intelbras WRN 150 - Authentication Bypass

Intelbras WRN 150 router is vulnerable to authentication bypass through cookie manipulation. An attacker can bypass authentication and download the router configuration file by manipulating the admin:language cookie. id: CVE-2017-14942 info: name: Intelbras WRN 150 - Authentication Bypass author:...

9.8CVSS7.7AI score0.60857EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added yesterday8 views

PT-2026-63252

Use after free in UI in Google Chrome prior to 150.0.7871.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

5.5AI score
Exploits0References3
OSV
OSV
added 2026/07/14 9:16 p.m.13 views

DEBIAN-CVE-2026-15765

Use after free in Ozone in Google Chrome prior to 150.0.7871.125 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

7.5CVSS6.1AI score0.00268EPSS
Exploits0References1
CVE
CVE
added 2026/07/14 8:9 p.m.16 views

CVE-2026-15778

CVE-2026-15778 affects Google Chrome navigation logic prior to version 150.0.7871.125, due to insufficient validation of untrusted input in Navigation. An attacker who compromises the renderer could bypass navigation restrictions via a crafted HTML page. The issue is addressed in Chrome 150.0.787...

6.5CVSS6.1AI score0.00263EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.10 views

PT-2026-58741

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.125 Description Insufficient validation of untrusted input in Navigation allows a remote attacker who has compromised the renderer process to bypass navigation restrictions using a crafted HTML page...

8.8CVSS5.6AI score0.00315EPSS
Exploits0References19
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.14 views

PT-2026-58737

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.125 Description A use after free issue in Skia allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape. This is achieved by using a crafted HTML page...

8.3CVSS6.1AI score0.00221EPSS
Exploits0References20
Fedora
Fedora
added 2026/07/12 1:12 a.m.10 views

[SECURITY] Fedora 44 Update: chromium-150.0.7871.114-1.fc44

Chromium is an open-source web browser, powered by WebKit Blink...

9.6CVSS6.1AI score0.00306EPSS
Exploits1
OSV
OSV
added 2026/07/08 11:16 p.m.3 views

DEBIAN-CVE-2026-15119

Race in GetUserMedia in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS6.1AI score0.00147EPSS
Exploits0References1
OSV
OSV
added 2026/07/08 11:16 p.m.1 views

DEBIAN-CVE-2026-15118

Use after free in Input in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.4AI score0.00242EPSS
Exploits0References1
OSV
OSV
added 2026/07/08 11:16 p.m.3 views

DEBIAN-CVE-2026-15113

Use after free in Autofill in Google Chrome on Android prior to 150.0.7871.115 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS6.2AI score0.00202EPSS
Exploits0References1
CVE
CVE
added 2026/07/08 10:36 p.m.20 views

CVE-2026-15128

CVE-2026-15128 concerns an inappropriate implementation in Forms in Google Chrome prior to 150.0.7871.115 that could allow a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. The Chrome stable update notes indicate the fix was delivered in the 150.0.7871.114/115 ...

6.1CVSS6.1AI score0.00139EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/08 10:36 p.m.37 views

CVE-2026-15116

Use after free in Actor in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

0.00242EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2026/07/08 10:36 p.m.7 views

CVE-2026-15114

Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: High...

8.8CVSS6AI score0.00187EPSS
Exploits0
Debian CVE
Debian CVE
added 2026/07/08 10:36 p.m.7 views

CVE-2026-15111

Use after free in Views in Google Chrome prior to 150.0.7871.115 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

7.5CVSS6AI score0.00178EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 2026/07/08 10:36 p.m.8 views

CVE-2026-15114

Out of bounds read and write in Codecs in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to potentially exploit heap corruption via a crafted video file. Chromium security severity: High...

6AI score0.00187EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/07/08 12:0 a.m.9 views

PT-2026-56642

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.115 Description An inappropriate implementation in the Document Object Model DOM, which is the programming interface for HTML and XML documents, allows a remote attacker to potentially cause heap...

8.8CVSS6AI score0.0026EPSS
Exploits0References38
Positive Technologies
Positive Technologies
added 2026/07/08 12:0 a.m.14 views

PT-2026-56641

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.115 Description Insufficient validation of untrusted input in Codecs allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. ...

8.8CVSS6AI score0.00306EPSS
Exploits0References36
EUVD
EUVD
added 2026/07/04 12:45 a.m.12 views

EUVD-2026-41655

An Incorrect Use of Privileged APIs vulnerability in Unity Parsec on Windows hosts leads to a potential Elevation of Privilege. This issue affects Parsec through v2026-05-04.0. The patched version is Parsec for Windows version 150-104a. A user can generate a situation where there is an instance o...

8.4CVSS6AI score0.00245EPSS
Exploits1References4
Rows per page
Query Builder