Lucene search
+L

25519 matches found

Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88585

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in Cross-Origin Resource Sharing CORS, a mechanism that allows restricted resources on a web page to be requested from another domain, enables a remote attacker...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•22 views

PT-2026-88615

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the FileAPI allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit a craft...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits12References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88616

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An observable discrepancy in Navigation allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Recommendations Update Google Chrome to version...

9.6CVSS6.3AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•18 views

PT-2026-88686

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read exists in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker to read memory outside...

9.6CVSS6.6AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88693

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in the Editing component that allows a remote attacker to obtain sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

9.6CVSS6.3AI score0.00573EPSS
SaveExploits12References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•16 views

PT-2026-88704

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An out of bounds read occurs in ANGLE, a compatibility layer that allows OpenGL ES APIs to run on various graphics platforms. This issue allows a remote attacker who has already...

9.6CVSS7.3AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•14 views

PT-2026-88731

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Missing authorization in the Document Object Model DOM, which is the programming interface for HTML and XML documents, allows a remote attacker to potentially leak sensitive information...

9.6CVSS6.4AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-88675

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in the Loader component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visi...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•15 views

PT-2026-88596

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A UI misrepresentation issue in the browser allows a remote attacker to spoof UI elements using a crafted HTML page through social engineering. Recommendations Update Google Chrome to...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits12References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•22 views

PT-2026-88687

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A use after free issue in V8 allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occurs...

9.6CVSS7.7AI score0.00573EPSS
SaveExploits11References242
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•20 views

PT-2026-88537

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An information leak exists in Frames that allows a remote attacker to leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update Google Chrome to...

9.6CVSS6.3AI score0.00573EPSS
SaveExploits11References241
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•17 views

PT-2026-88663

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description An origin validation error in the Paint component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Origin validation is a security mechanism that ensur...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits11References241
Redos
Redos
•added 2026/09/07 12:00 a.m.•13 views

ROS-20260907-73-0064

The vulnerability of the Skia component in Google Chrome and Microsoft Edge is related to errors in HTTP request processing. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

8.3CVSS7.7AI score0.00182EPSS
SaveExploits1
SUSE CVE
SUSE CVE
•added 2026/09/05 12:23 a.m.•16 views

SUSE CVE-2026-85047

Improper input validation in Transactions Platform in Google Chrome on on iOS prior to 152.0.7977.82 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6.9AI score0.00462EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/09/05 12:23 a.m.•12 views

SUSE CVE-2026-85049

Use after free in Skia in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.5AI score0.00283EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/09/05 12:23 a.m.•16 views

SUSE CVE-2026-85052

Out of bounds read in CrashReporting in Google Chrome prior to 152.0.7977.82 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. Chromium security severity: High...

3.1CVSS6AI score0.0023EPSS
SaveExploits0References3
NCSC
NCSC
•added 2026/09/04 1:20 p.m.•46 views

vulnerabilities present in Google Chrome

Google has identified several vulnerabilities in Google Chrome, particularly in versions for 152.0.7977.82. These vulnerabilities reside in various components of Google Chrome, including DevTools, Network, V8 JavaScript engine, and Transactions Platform on iOS. Attackers can exploit these...

9.6CVSS7.3AI score0.48881EPSS
SaveExploits6References1
Chainguard
Chainguard
•added 2026/09/04 8:26 a.m.•22 views

GHSA-Q9QV-6QX8-79CG vulnerabilities

Vulnerabilities for packages: chromium...

5.3AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/09/04 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-85053

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a remote attacker to execute arbitrary code inside the sandbox via a...

8.8CVSS8.2AI score0.00413EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/04 12:00 a.m.•17 views

MiracleLinux 9 : wget-1.21.1-11.el9_8 (AXSA:2026-1757:02)

The remote MiracleLinux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2026-1757:02 advisory. wget: GNU Wget: Heap buffer overflow via server-supplied filename leads to memory corruption CVE-2026-58471 wget: GNU Wget: Arbitrary code execution...

7.1CVSS8.2AI score0.0039EPSS
SaveExploits0References3
Rows per page
Query Builder