CVE-2026-5284 vulnerabilities

Vulnerabilities for packages: chromium...

CVE-2026-5284 vulnerabilities

Vulnerabilities for packages: chromium...

MINI-M72Q-RCRH-5284

Bulletin has no description...

OPENSUSE-SU-2026:20460-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 146.0.7680.177 boo1261249 CVE-2026-5273: Use after free in CSS CVE-2026-5272: Heap buffer overflow in GPU CVE-2026-5274: Integer overflow in Codecs CVE-2026-5275: Heap buffer overflow in ANGLE CVE-2026-5276:...

Chromium: CVE-2026-5284 Use after free in Dawn

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2026-5284

An use after free flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=492139412...

CVE-2026-5284

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-5284

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-5284

Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2026-5284

CVE-2026-5284 is a use-after-free vulnerability in Dawn (Chromium-based) present in Google Chrome before version 146.0.7680.178. A remote attacker who has compromised the renderer process could execute arbitrary code via a crafted HTML page. Severity is High; CVSS 3.1 base score 7.5 (AV:N/AC:H/PR...

CVE-2026-5284

creationtimestamp| type| source ---|---|--- 2026-03-31 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0385/ 2026-04-01 08:02:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miga2zax3r2i 2026-04-01 15:25:49+00:00| seen|...

CVE-2016-5284

creationtimestamp| type| source ---|---|--- 2025-11-22 19:26:52+00:00| seen| https://bsky.app/profile/ethdevnews.bsky.social/post/3m6ajor6mek2c 2025-11-22 19:35:31+00:00| seen| https://bsky.app/profile/ethdevnews.bsky.social/post/3m6ak6acdfc2c 2025-11-22 21:31:51+00:00| seen|...

CVE-2025-5284

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS extension in all versions up to, and including, 2.0.8.2 due to insufficient capability restriction, and...

CVE-2025-5284

creationtimestamp| type| source ---|---|--- 2025-07-16 10:24:49+00:00| seen| Telegram/0-Kp6GlmqcKBxgmMNwhAdg4plPs1MrOEyuYv0jjGsZkjako...

CVE-2025-5284

The Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Custom JS extension in all versions up to, and including, 2.0.8.2 due to insufficient capability restriction, and...

CVE-2025-5284

CVE-2025-5284 affects the WordPress plugin “Master Addons – Elementor Addons with White Label, Free Widgets, Hover Effects, Conditions, & Animations.” It describes a Stored Cross-Site Scripting (XSS) vulnerability via the Custom JS extension in all versions up to and including 2.0.8.2, caused by ...

WordPress Master Addons for Elementor plugin <= 2.0.8.2 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by zer0gh0st in WordPress Plugin Master Addons for Elementor versions = 2.0.8.2...

WordPress Affiliate Manager Plugin < 6.5.1 is vulnerable to Cross Site Request Forgery (CSRF)

Software Affiliate Manager Type Plugin Vulnerable versions 6.5.1 Fixed in 6.5.1 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-5284 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID f0487dd08240 Credits Bob Matyas Required...

CVE-2024-5284

creationtimestamp| type| source ---|---|--- 2024-07-13 08:49:49+00:00| seen| https://t.me/cvedetector/808...

CVE-2024-5284 WP Affiliate Platform < 6.5.1 - Stored XSS via CSRF

The wp-affiliate-platform WordPress plugin before 6.5.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack...