Lucene search
+L

2098 matches found

NVD
NVD
•added 2025/04/02 1:15 a.m.•22 views

CVE-2025-3073

Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS0.00294EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/04/02 12:42 a.m.•30 views

CVE-2025-3073

Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.9AI score0.00294EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/04/02 12:42 a.m.•11 views

CVE-2025-3073

Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.8AI score0.00294EPSS
SaveExploits0References2
CVE
CVE
•added 2025/04/02 12:42 a.m.•137 views

CVE-2025-3073

Google Chrome versions prior to 135.0.7049.52 are vulnerable to a UI spoofing issue in the Autofill component. The root cause is an inappropriate implementation that allows a remote attacker to trick a user into performing specific UI gestures, leading to the display of a spoofed interface via a ...

5.4CVSS6.4AI score0.00294EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/04/02 12:42 a.m.•36 views

CVE-2025-3073

Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

0.00294EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/04/02 12:00 a.m.•0 views

CVE-2025-3073: User Interface (UI) Misrepresentation of Critical Information

Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.6AI score0.00294EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/01 12:00 a.m.•18 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that originates from an improper implementation in Autofill. An attacker can exploit the vulnerability to bypass security restrictions...

5.4CVSS6.6AI score0.00294EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2025/04/01 12:00 a.m.•9 views

PT-2025-14455 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.52 Description: The issue is related to an inappropriate implementation in Autofill, allowing a remote attacker to perform UI spoofing via a crafted HTML page if the user is convinced to engage in...

8.8CVSS4.9AI score0.00775EPSS
SaveExploits0References66
FreeBSD
FreeBSD
•added 2025/04/01 12:00 a.m.•24 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 13 security fixes: 376491759 Medium CVE-2025-3067: Inappropriate implementation in Custom Tabs. Reported by Philipp Beer TU Wien on 2024-10-31 401823929 Medium CVE-2025-3068: Inappropriate implementation in Intents. Reported by Simon Rawet on 2025-03-...

8.8CVSS7.5AI score0.00775EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/31 11:15 p.m.•13 views

CVE-2025-30430

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. Password autofill may fill in passwords after failing authentication...

9.8CVSS0.01163EPSS
SaveExploits0References8
Vulnrichment
Vulnrichment
•added 2025/03/31 10:23 p.m.•6 views

CVE-2025-30430

This issue was addressed through improved state management. This issue is fixed in visionOS 2.4, iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4. Password autofill may fill in passwords after failing authentication...

6.2AI score0.01163EPSS
SaveExploits0References3
CVE
CVE
•added 2025/03/31 10:23 p.m.•107 views

CVE-2025-30430

Apple has addressed a vulnerability where password autofill might populate credentials after a failed authentication attempt due to improved state management . This issue affects iOS 18.4 , iPadOS 18.4 , macOS Sequoia 15.4 , visionOS 2.4 , and watchOS 11.4 . Remediation is available through the r...

9.8CVSS5.8AI score0.01163EPSS
SaveExploits0References8Affected Software4
Cvelist
Cvelist
•added 2025/03/31 10:23 p.m.•30 views

CVE-2025-30430

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. Password autofill may fill in passwords after failing authentication...

0.01163EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/03/31 12:00 a.m.•15 views

Apple iOS和Apple iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS, which arises from the possibility that password autofill ma...

9.8CVSS6.6AI score0.01163EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2025/02/12 12:00 a.m.•16 views

The vulnerability of the Password Autofill component in operating systems such as visionOS, iOS, iPadOS, MacOS, and watchOS allows attackers to read and write arbitrary files.

The vulnerability of the Password Autofill component in the visionOS, iOS, iPadOS, MacOS, and watchOS operating systems is related to the absence of authentication. Exploiting this vulnerability allows attackers to read and write arbitrary files...

3.3CVSS7.3AI score0.00567EPSS
SaveExploits0References5Affected Software5
AstraLinux
AstraLinux
•added 2025/02/11 7:35 a.m.•7 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Autofill in Google Chrome prior to 131.0.6778.69 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.6AI score0.00436EPSS
SaveExploits1References3
NVD
NVD
•added 2025/01/27 10:15 p.m.•19 views

CVE-2024-54530

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, watchOS 11.2. Password autofill may fill in passwords after failing authentication...

9.1CVSS0.00567EPSS
SaveExploits0References4
OSV
OSV
•added 2025/01/27 10:15 p.m.•13 views

CVE-2024-54530

The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.2, watchOS 11.2, visionOS 2.2, iOS 18.2 and iPadOS 18.2. Password autofill may fill in passwords after failing authentication...

9.1CVSS5.8AI score0.00567EPSS
SaveExploits0References4
CVE
CVE
•added 2025/01/27 9:45 p.m.•105 views

CVE-2024-54530

The Password Autofill component in iOS , iPadOS , macOS , visionOS , and watchOS is vulnerable to a security issue where it may fill in passwords after an authentication failure. While some reports suggest this lack of authentication could allow attackers to read and write arbitrary files, the pr...

9.1CVSS7.1AI score0.00567EPSS
SaveExploits0References4Affected Software5
Vulnrichment
Vulnrichment
•added 2025/01/27 9:45 p.m.•9 views

CVE-2024-54530

The issue was addressed with improved checks. This issue is fixed in iOS 18.2 and iPadOS 18.2, macOS Sequoia 15.2, visionOS 2.2, watchOS 11.2. Password autofill may fill in passwords after failing authentication...

7.1AI score0.00567EPSS
SaveExploits0References4
Rows per page
Query Builder