Lucene search
+L

37 matches found

Positive Technologies
Positive Technologies
added 2026/05/19 12:00 a.m.24 views

PT-2026-42236

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.179 Description Insufficient policy enforcement in ServiceWorker allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. A ServiceWorker is a script that the browser...

4.3CVSS5.8AI score0.00218EPSS
SaveExploits0References23
SUSE CVE
SUSE CVE
added 2026/05/08 2:27 a.m.16 views

SUSE CVE-2026-7922

Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.8AI score0.00206EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/05/07 12:00 a.m.10 views

Linux Distros Unpatched Vulnerability : CVE-2026-7909

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypa...

3.1CVSS6.1AI score0.00187EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/05/07 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-7963

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to...

8.3CVSS7AI score0.00222EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/05/06 6:12 p.m.9 views

CVE-2026-7963

Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00222EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/05/06 6:12 p.m.51 views

CVE-2026-7958

Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a malicious extension to inject arbitrary scripts or HTML UXSS via a crafted Chrome Extension. Chromium security severity: Medium...

0.00142EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/06 6:12 p.m.8 views

CVE-2026-7922

Use after free in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00206EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/05/06 6:12 p.m.11 views

CVE-2026-7909

Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00187EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/08 9:21 p.m.6 views

CVE-2026-5911

Policy bypass in ServiceWorkers in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...

5.9AI score0.00166EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.6 views

EUVD-2015-6694

Malware in sbrugna...

7.5CVSS9.3AI score0.01659EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
added 2025/09/15 12:00 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-10200

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a craft...

8.8CVSS7.1AI score0.00574EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2018-6150

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.3AI score0.00867EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 4:16 a.m.5 views

SUSE CVE-2019-5811

Incorrect handling of CORS in ServiceWorker in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

8.8CVSS6.8AI score0.01246EPSS
SaveExploits0References7
OSV
OSV
added 2023/01/30 9:15 a.m.1 views

DEBIAN-CVE-2023-0473

Type Confusion in ServiceWorker API in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS8.2AI score0.00678EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/16 12:00 a.m.21 views

The vulnerability of Google Chrome’s ServiceWorker script allows a perpetrator to compromise data integrity, gain unauthorized access to protected information, and cause service failures.

The vulnerability of Google Chrome’s ServiceWorker script is related to a processing error in the Cross-Origin Resource Sharing CORS policy. Exploiting this vulnerability allows an attacker to compromise data integrity, gain unauthorized access to protected information, and cause service failures...

10CVSS5.5AI score0.01246EPSS
SaveExploits0References12Affected Software5
CNVD
CNVD
added 2019/06/05 12:00 a.m.13 views

Google Chrome ServiceWorker Resource Management Error Vulnerability

Google Chrome is a web browser from Google, and ServiceWorker is one of the backend messaging components. A resource management error vulnerability exists in ServiceWorker in versions of Google Chrome prior to 75.0.3770.80. The vulnerability stems from the mismanagement of system resources e.g.,...

8.8CVSS8.4AI score0.01385EPSS
SaveExploits0References1
OSV
OSV
added 2019/02/19 5:29 p.m.4 views

DEBIAN-CVE-2019-5779

Insufficient policy validation in ServiceWorker in Google Chrome prior to 72.0.3626.81 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

4.3CVSS5.7AI score0.02586EPSS
SaveExploits0References1
Rows per page
Query Builder