Lucene search
K

52 matches found

Debian CVE
Debian CVE
added 6 days ago5 views

CVE-2026-11227

Incorrect security UI in Tab Hover Cards in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted domain name. Chromium security severity: Low...

6.5CVSS5.5AI score0.00022EPSS
Exploits0
ATTACKERKB
ATTACKERKB
added 6 days ago4 views

CVE-2026-11222

Incorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

5.8AI score0.00022EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 6 days ago28 views

CVE-2026-11222

Incorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

0.00022EPSS
Exploits0References2
Debian CVE
Debian CVE
added 6 days ago5 views

CVE-2026-11222

Incorrect security UI in Tab Strip in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.5AI score0.00022EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/06/02 12:0 a.m.6 views

PT-2026-46753

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description Incorrect security UI in Tab Hover Cards allows a remote attacker to perform domain spoofing by using a crafted domain name. Recommendations Update to version 149.0.7827.53 or later...

9.6CVSS5.8AI score0.04468EPSS
Exploits0References434
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.1 views

Astra Linux - уязвимость в chromium

A heap buffer overflow in the Tab Groups component of Google Chrome prior to version 126.0.6478.54 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

8.8CVSS6AI score0.00142EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.1 views

Astra Linux - уязвимость в chromium

In Google Chrome, out-of-bounds read operations in tab groups were allowed before version 90.0.4430.212. This enabled an attacker who convinced a user to install a malicious extension to perform an out-of-bounds memory read through a crafted HTML page...

8.1CVSS7.3AI score0.00322EPSS
Exploits1References1
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.4 views

Astra Linux – Vulnerability in Chromium

Before version 94.0.4606.54, using Tab Strip with free resources in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

8.8CVSS7.7AI score0.00737EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/05/16 1:15 a.m.9 views

SUSE CVE-2026-8521

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

7.5CVSS6.2AI score0.00044EPSS
Exploits0References3
Cvelist
Cvelist
added 2026/05/14 7:52 p.m.27 views

CVE-2026-8521

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

0.00044EPSS
Exploits0References2
CVE
CVE
added 2026/05/14 7:52 p.m.13 views

CVE-2026-8521

Google Chrome is affected by CVE-2026-8521 due to a use-after-free in Tab Groups. The vulnerability, occurring in Chrome prior to version 148.0.7778.168, allows a remote attacker to execute arbitrary code via malicious network traffic. The CVE entry cites Chromium as the underlying security issue...

7.5CVSS6.2AI score0.00044EPSS
Exploits0References2Affected Software1
Malwarebytes
Malwarebytes
added 2026/04/15 5:43 p.m.3 views

AI clickbait can turn your notifications into a scam feed

Pushpaganda is the name researchers have given to an AI-assisted ad fraud, social engineering, and scareware operation targeting mobile users. For most people, Pushpaganda starts as something that looks completely normal. For example, a recommended article in your Google Discover feed the...

5.7AI score
Exploits0
OSV
OSV
added 2025/11/06 10:15 p.m.0 views

CVE-2025-11210

Side-channel information leakage in Tab in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2025/11/06 10:15 p.m.1 views

CVE-2025-11210

Side-channel information leakage in Tab in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS0.00023EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/11/06 10:8 p.m.6 views

CVE-2025-11210

Side-channel information leakage in Tab in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

0.00023EPSS
Exploits0References2
CVE
CVE
added 2025/11/06 10:8 p.m.14 views

CVE-2025-11210

CVE-2025-11210 concerns a side-channel information leakage in Chrome/Chromium Tab UI that enables UI spoofing via a crafted HTML page, affecting Google Chrome/Chromium before 141.0.7390.54. Connected sources indicate Chromium/Chrome update paths to fixed versions (e.g., Chrome 141.0.7390.107 and ...

5.4CVSS5.5AI score0.00023EPSS
Exploits0References2Affected Software1
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-17513

Malware in sbrugna...

8.1CVSS7.1AI score0.00238EPSS
Exploits1References8
SUSE CVE
SUSE CVE
added 2025/10/01 11:25 p.m.1 views

SUSE CVE-2025-11210

Side-channel information leakage in Tab in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS6.2AI score0.00023EPSS
Exploits0References3
NVD
NVD
added 2025/05/27 9:15 p.m.5 views

CVE-2025-5067

Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS0.00054EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2024/06/13 4:0 a.m.1 views

SUSE CVE-2024-5835

Heap buffer overflow in Tab Groups in Google Chrome prior to 126.0.6478.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.3AI score0.00142EPSS
Exploits0References6
Rows per page
Query Builder