Lucene search
+L

11701 matches found

attackerkb
attackerkb
•added 2026/04/28 10:36 p.m.•12 views

CVE-2026-7342

Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.9AI score0.00484EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/04/28 10:36 p.m.•82 views

CVE-2026-7342

A use after free vulnerability exists in the WebView component of Google Chrome on Android (versions prior to 147.0.7727.138 ). The flaw allows a remote attacker to execute arbitrary code inside a sandbox by serving a crafted HTML page . This issue has been addressed in recent security updates, s...

8.8CVSS8.9AI score0.00484EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/04/28 10:36 p.m.•13 views

CVE-2026-7342

Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.9AI score0.00484EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/04/28 10:36 p.m.•53 views

CVE-2026-7342

Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

0.00484EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/28 10:36 p.m.•15 views

EUVD-2026-26168

Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.9AI score0.00484EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/04/28 10:36 p.m.•14 views

CVE-2026-7342

Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.9AI score0.00484EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2026/04/28 10:36 p.m.•30 views

CVE-2026-7342

Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.9AI score0.00484EPSS
SaveExploits0
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•22 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 147.0.7727.138 contained a resource management vulnerability. This vulnerability stemmed from the reuse of the WebView component after it was released, potentially allowing a remote attacker to execute...

8.8CVSS8.5AI score0.00484EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•3 views

CVE-2026-7342: Use After Free

Use after free in WebView in Google Chrome on Android prior to 147.0.7727.138 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.9AI score0.00484EPSS
SaveExploits0References3
Fedora
Fedora
•added 2026/04/25 1:55 a.m.•23 views

[SECURITY] Fedora 44 Update: qt6-qtwebview-6.10.3-1.fc44

Qt WebView provides a way to display web content in a QML application without necessarily including a full web browser stack by using native APIs where it makes sense...

5.3AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/17 12:00 a.m.•17 views

PT-2026-35842

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 147.0.7727.138 Description A use after free issue exists in the WebView component, which allows a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. Use...

10CVSS8.1AI score0.00523EPSS
SaveExploits1References138
Positive Technologies
Positive Technologies
•added 2026/04/17 12:00 a.m.•3 views

PT-2026-36235

Уязвимость компонента для отображения веб-страниц WebView браузера Google Chrome связана с возможностью использования памяти после освобождения. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

10CVSS5.9AI score0.00484EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/04/14 12:00 a.m.•17 views

Google Chrome WebView Data Compromise

The vulnerability of the WebView component of Google Chrome’s browser involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML page...

10CVSS6.7AI score0.00359EPSS
SaveExploits0References7Affected Software6
NVD
NVD
•added 2026/04/10 5:17 p.m.•36 views

CVE-2026-35643

OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing attackers to inject arbitrary instructions. Untrusted pages can invoke the canvas bridge to execute malicious code within the Android application context...

8.8CVSS0.00538EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/10 4:03 p.m.•12 views

CVE-2026-35643 OpenClaw < 2026.3.22 - Arbitrary Code Execution via Unvalidated WebView JavascriptInterface

OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing attackers to inject arbitrary instructions. Untrusted pages can invoke the canvas bridge to execute malicious code within the Android application context...

8.8CVSS6.3AI score0.00538EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/10 4:03 p.m.•68 views

CVE-2026-35643

OpenClaw, before 2026.3.22, is affected by an unvalidated WebView JavascriptInterface vulnerability that allows arbitrary code execution when untrusted pages invoke the canvas bridge to run code inside the Android app. Root cause: unvalidated JavascriptInterface exposure in WebView. Impact includ...

8.8CVSS6.3AI score0.00538EPSS
SaveExploits0References4Affected Software1
osv_cve
osv_cve
•added 2026/04/10 4:03 p.m.•19 views

CVE-2026-35643 OpenClaw < 2026.3.22 - Arbitrary Code Execution via Unvalidated WebView JavascriptInterface

OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing attackers to inject arbitrary instructions. Untrusted pages can invoke the canvas bridge to execute malicious code within the Android application context...

8.6CVSS6.2AI score
SaveExploits0References6
EUVD
EUVD
•added 2026/04/10 4:03 p.m.•20 views

EUVD-2026-21438

OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing attackers to inject arbitrary instructions. Untrusted pages can invoke the canvas bridge to execute malicious code within the Android application context...

8.8CVSS6.3AI score0.00538EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/10 4:03 p.m.•8 views

CVE-2026-35643

OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing attackers to inject arbitrary instructions. Untrusted pages can invoke the canvas bridge to execute malicious code within the Android application context...

8.8CVSS6.3AI score0.00538EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/10 12:00 a.m.•7 views

CVE-2026-35643: Improper Verification of Source of a Communication Channel

OpenClaw before 2026.3.22 contains an unvalidated WebView JavascriptInterface vulnerability allowing attackers to inject arbitrary instructions. Untrusted pages can invoke the canvas bridge to execute malicious code within the Android application context...

8.8CVSS6.3AI score0.00538EPSS
SaveExploits0References1
Rows per page
Query Builder