Lucene search
+L

60043 matches found

NVD
NVD
added 2026/06/30 11:17 p.m.12 views

CVE-2026-14155

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

6.5CVSS0.00211EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/30 11:17 p.m.11 views

CVE-2026-14156

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

6.5CVSS0.002EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/30 11:17 p.m.9 views

DEBIAN-CVE-2026-14156

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.8AI score0.002EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/30 11:17 p.m.10 views

CVE-2026-14051

Uninitialized Use in GamepadAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

6.5CVSS0.00259EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/30 11:17 p.m.7 views

DEBIAN-CVE-2026-14023

Insufficient validation of untrusted input in SanitizerAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score0.00319EPSS
SaveExploits0References1
NVD
NVD
added 2026/06/30 11:17 p.m.10 views

CVE-2026-14021

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00257EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/30 11:17 p.m.7 views

DEBIAN-CVE-2026-14021

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score0.00257EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2026/06/30 11:17 p.m.9 views

CVE-2026-14051

Uninitialized Use in GamepadAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

6.5CVSS6.1AI score0.00259EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2026/06/30 10:56 p.m.6 views

nodejs: Node.js: Unauthorized file metadata modification

A flaw was found in Node.js. The Permission API allows a local user to modify file metadata on paths that have been explicitly set as read-only. This can lead to unauthorized changes in file properties, impacting the integrity of the file system...

3.3CVSS6.6AI score0.00185EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/06/30 10:56 p.m.6 views

nodejs: Node.js: Local server can be started without network permission via Permission API flaw

A flaw was found in Node.js. The Node.js Permission API can allow a local server to be started through a Unix domain socket, even when the --allow-net permission is not explicitly granted. This bypasses intended security restrictions, potentially leading to unintended local network exposure or...

3.3CVSS6.3AI score0.00154EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/06/30 10:39 p.m.45 views

CVE-2026-14156

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

0.002EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/30 10:39 p.m.58 views

CVE-2026-14156

CVE-2026-14156 : Concrete details across multiple sources show an issue in Google Chrome’s StorageAccessAPI where insufficient policy enforcement enables a remote attacker who compromised a renderer process to bypass same-origin policy via a crafted HTML page. Affected component: StorageAccessAPI...

6.5CVSS5.8AI score0.002EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/06/30 10:39 p.m.58 views

CVE-2026-14155

Technical details are not publicly available in the provided documents for CVE-2026-14155; monitor for updates from the connected sources.

6.5CVSS5.8AI score0.00211EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/06/30 10:39 p.m.43 views

CVE-2026-14155

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

0.00211EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/06/30 10:39 p.m.11 views

CVE-2026-14155

Insufficient policy enforcement in StorageAccessAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.8AI score0.00211EPSS
SaveExploits0
CVE
CVE
added 2026/06/30 10:39 p.m.71 views

CVE-2026-14150

CVE-2026-14150 affects Google Chrome’s Speech component and is due to insufficient validation of untrusted input in the renderer. Prior to version 150.0.7871.47, a remote attacker who had already compromised the renderer process could perform UI spoofing via a crafted HTML page. The security rati...

5.4CVSS5.8AI score0.00152EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/06/30 10:39 p.m.45 views

CVE-2026-14051

CVE-2026-14051 concerns Google Chrome where the GamepadAPI has an uninitialized memory access bug. A remote attacker who has already compromised the renderer process could read potentially sensitive data from process memory via a crafted HTML page. Affected versions are Chrome prior to 150.0.7871...

6.5CVSS5.8AI score0.00259EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/06/30 10:39 p.m.41 views

CVE-2026-14051

Uninitialized Use in GamepadAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

0.00259EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/06/30 10:39 p.m.10 views

CVE-2026-14051

Uninitialized Use in GamepadAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.8AI score0.00259EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/06/30 10:38 p.m.11 views

CVE-2026-14023

Insufficient validation of untrusted input in SanitizerAPI in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score0.00319EPSS
SaveExploits0
Rows per page
Query Builder