CVE-2025-13229

A Type Confusion vulnerability exists in the V8 engine of Google Chrome (and Chromium) prior to version 142.0.7444.59 . The flaw stems from errors in handling object types, which can be exploited by a remote attacker to trigger heap corruption via a specially crafted HTML page. This vulnerability...

EUVD-2025-197890

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-13224

Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2025-13224

A Type Confusion vulnerability exists in the V8 engine of Google Chrome (and other products using the Chromium project). The flaw is caused by type obfuscation or type mixing errors within the JavaScript script handler , which can be exploited by a remote attacker to trigger heap corruption or ex...

Vulnerability of the Omnibox component in Google Chrome and Microsoft Edge browsers; perform a substitution of the user interface

The vulnerability of the Omnibox component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace the user interface with a specially created HTML page...

The vulnerability of Google Chrome, related to errors in information representation by the user interface, allows a perpetrator to replace the user interface.

The vulnerability of Google Chrome is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...

CVE-2025-12725

Out of bounds read in WebGPU in Google Chrome on Android prior to 142.0.7444.137 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

CVE-2025-12440

An inappropriate implementation in the Autofill component of Google Chrome (prior to version 142.0.7444.59 ) and Microsoft Edge allows a remote attacker to obtain potentially sensitive information from process memory. The vulnerability is triggered when a user is convinced to perform specific UI ...

CVE-2025-12438

Use after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-12036

Out of bounds memory access in V8 in Google Chrome prior to 141.0.7390.122 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

CVE-2025-11212

Inappropriate implementation in Media in Google Chrome on Windows prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-11208

Inappropriate implementation in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

IceScrum 安全漏洞

IceScrum is a project management software from the French company IceScrum. A security vulnerability exists in IceScrum that originates from specially crafted HTML pages that can lead to remote code execution...

EUVD-2025-24534

Malicious code in bioql PyPI...

SUSE CVE-2025-11211

Out of bounds read in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-10585

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Linux Distros Unpatched Vulnerability : CVE-2014-4459

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use-after-free vulnerability in WebKit, as used in Apple OS X before 10.10.1, allows remote attackers to execute arbitrary code via crafted page objects in an...

CVE-2025-56265

An arbitrary file upload vulnerability in the Chat Trigger component of N8N v1.95.3, v1.100.1, and v1.101.1 allows attackers to execute arbitrary code via uploading a crafted HTML file...

CVE-2025-9865

In Google Chrome on Android (versions prior to 140.0.7339.80 ), an inappropriate implementation in the Toolbar component allows a remote attacker to perform domain spoofing . The attacker must first convince a user to engage in specific UI gestures while visiting a crafted HTML page. This vulnera...

Linux Distros Unpatched Vulnerability : CVE-2017-11114

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The putchars function in htmlr.c in Twibright Links 2.14 allows remote attackers to cause a denial of service buffer over-read via a crafted HTML file...