Lucene search
+L

40 matches found

RedhatCVE
RedhatCVE
•added 2026/09/29 6:45 p.m.•6 views

CVE-2026-95375

A flaw was found in chromium-browser. An incorrect authorization issue in the BrowserTag component allows a remote attacker who has compromised a renderer process to bypass the web origin policy via a crafted HTML page. This allows the attacker to circumvent the security boundary that isolates da...

6.3CVSS5.8AI score0.00207EPSS
SaveExploits1References2
OSV
OSV
•added 2026/09/29 6:17 p.m.•7 views

DEBIAN-CVE-2026-95375

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS6AI score0.00207EPSS
SaveExploits1References1
NVD
NVD
•added 2026/09/29 6:17 p.m.•8 views

CVE-2026-95375

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS0.00207EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2026/09/29 6:17 p.m.•10 views

CVE-2026-95375

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS6AI score0.00207EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2026/09/29 5:31 p.m.•7 views

CVE-2026-95375

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS6AI score0.00207EPSS
SaveExploits1
EUVD
EUVD
•added 2026/09/29 5:31 p.m.•5 views

EUVD-2026-89253

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

6AI score0.00207EPSS
SaveExploits1References2
CVE
CVE
•added 2026/09/29 5:31 p.m.•28 views

CVE-2026-95375

Google Chrome and chromium-browser versions prior to 154.0.8037.57 are vulnerable to an incorrect authorization flaw in the BrowserTag component. A remote attacker who has compromised a renderer process can use a crafted HTML page to bypass the web origin policy . This allows the attacker to circ...

6.3CVSS6AI score0.00207EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2026/09/29 5:31 p.m.•39 views

CVE-2026-95375

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

0.00207EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•4 views

FreeBSD: VID-bd24bc14-b9a9-11f1-bf98-a8a1599412c6 (CVE-2026-95375): chromium -- security fixes

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS6AI score0.00207EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/29 12:00 a.m.•2 views

CVE-2026-95375: Incorrect Authorization

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS6AI score0.00207EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2026/09/25 9:01 a.m.•10 views

CVE-2026-78897

A flaw was found in BrowserTag in Google Chrome. Missing authorization allows a remote attacker, leveraging social engineering, to obtain sensitive information by using a specially crafted Chrome extension...

6.5CVSS5.9AI score0.00299EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2026/09/23 4:53 p.m.•4 views

SUSE CVE-2026-95375

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

6AI score0.00207EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
•added 2026/09/23 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-95375

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web...

6.3CVSS6AI score0.00207EPSS
SaveExploits1References2
Redos
Redos
•added 2026/09/15 12:00 a.m.•12 views

ROS-20260915-73-0195

The vulnerability of the BrowserTag component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

8.8CVSS7.9AI score0.00263EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/09/02 12:00 a.m.•9 views

The vulnerability of the BrowserTag component in Google Chrome and Microsoft Edge web browsers allows a hacker to trigger a service failure.

The vulnerability of the BrowserTag component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

10CVSS7.9AI score0.00263EPSS
SaveExploits0References8Affected Software4
Microsoft CVE
Microsoft CVE
•added 2026/08/28 2:00 p.m.•18 views

Chromium: CVE-2026-78897 Missing authorization in BrowserTag

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS5.8AI score0.00299EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/08/27 12:19 a.m.•9 views

SUSE CVE-2026-78897

Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...

6.5CVSS6AI score0.00299EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-78897

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive...

6.5CVSS6.4AI score0.00299EPSS
SaveExploits0References2
OSV
OSV
•added 2026/08/25 9:17 p.m.•8 views

DEBIAN-CVE-2026-78897

Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...

6.5CVSS5.9AI score0.00299EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/25 9:17 p.m.•13 views

CVE-2026-78897

Missing authorization in BrowserTag in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted Chrome extension. Chromium security severity: Low...

6.5CVSS0.00299EPSS
SaveExploits0References2
Rows per page
Query Builder