Lucene search
+L

25817 matches found

Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•25 views

PT-2026-54194

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input allows a remote attacker to bypass navigation restrictions. This occurs when a user is convinced to perform specific UI gestures while...

6.5CVSS5.8AI score0.00264EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•39 views

PT-2026-54304

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description Incorrect security UI allows a remote attacker to perform UI spoofing via a crafted HTML page if a user is convinced to engage in specific UI gestures. Recommendations Update...

4.2CVSS5.8AI score0.00198EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•42 views

PT-2026-54190

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description Insufficient policy enforcement in the Autofill feature allows a remote attacker to leak cross-origin data. This occurs when a user is convinced to perform specific UI gestures o...

6.5CVSS5.4AI score0.00248EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•31 views

PT-2026-54230

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47 Description Insufficient policy enforcement in XML allows a remote attacker to obtain potentially sensitive information from process memory by inducing the user to visit a crafted HTML...

6.5CVSS5.7AI score0.00306EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•28 views

PT-2026-54321

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47 Description An inappropriate implementation in CustomTabs allows a remote attacker to bypass the same origin policy, which is a security mechanism that restricts how a document or script...

4.3CVSS5.8AI score0.00236EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•5 views

CVE-2026-14143: User Interface (UI) Misrepresentation of Critical Information

Incorrect security UI in Passwords in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.8AI score0.00217EPSS
SaveExploits0References3
CNVD
CNVD
•added 2026/06/30 12:00 a.m.•108 views

Google Chrome Authorization Vulnerability (CNVD-2026-26521)

Google Chrome is a cross-platform web browser developed by Google Inc. of the United States. There is a security vulnerability in Google Chrome. This vulnerability stems from improper handling of passwords in the Password module. Attackers can exploit this vulnerability to leak cross-source data...

4.3CVSS5.3AI score0.00194EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•8 views

CVE-2026-14136: User Interface (UI) Misrepresentation of Critical Information

Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.8AI score0.00217EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•32 views

PT-2026-54189

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description An inappropriate implementation in the Safe Browsing component allows a remote attacker to perform UI spoofing by using a crafted HTML page. Recommendations Update Google Chrome ...

4.3CVSS5.8AI score0.00245EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•24 views

PT-2026-54066

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description A use after free issue in the GPU allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. A sandbox escape is ...

10CVSS8.7AI score0.00345EPSS
SaveExploits0References16
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•22 views

PT-2026-54342

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description A use after free issue exists where a remote attacker can execute arbitrary code by inducing the user to visit a specially crafted HTML page. Use after free is a memory corruptio...

8.8CVSS7.1AI score0.00413EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•4 views

CVE-2026-13980: User Interface (UI) Misrepresentation of Critical Information

Inappropriate implementation in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.6AI score0.00245EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•35 views

PT-2026-54350

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description Insufficient policy enforcement allows a remote attacker to bypass the no-referrer policy, which is a security mechanism that prevents the browser from sending the referrer heade...

4.3CVSS5.8AI score0.00252EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•23 views

PT-2026-54251

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 150.0.7871.47 Description An out-of-bounds read exists in ANGLE, a graphics abstraction layer. A remote attacker who has already compromised the renderer process can use a specially crafted HTML page to...

5.3CVSS5.8AI score0.00255EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•10 views

CVE-2026-14123: User Interface (UI) Misrepresentation of Critical Information

Incorrect security UI in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.8AI score0.00217EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•4 views

CVE-2026-14067: Use After Free

Use after free in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: Low...

8.8CVSS7.2AI score0.00413EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•4 views

CVE-2026-14041: Client-Side Enforcement of Server-Side Security

Insufficient policy enforcement in Serial in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

8.8CVSS7.6AI score0.00345EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•6 views

CVE-2026-13930: Client-Side Enforcement of Server-Side Security

Insufficient policy enforcement in Actor in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.5AI score0.00348EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•4 views

CVE-2026-13783: Use After Free

Use after free in Views in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

9.6CVSS8.8AI score0.00319EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/06/30 12:00 a.m.•25 views

PT-2026-54381

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 150.0.7871.47 Description Insufficient validation of untrusted input in Text allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTM...

9.6CVSS6.4AI score0.00345EPSS
SaveExploits0
Rows per page
Query Builder