Lucene search
+L

11356 matches found

RedHat Linux
RedHat Linux
added 2026/08/26 4:50 p.m.9 views

urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers

A flaw was found in urllib3, an HTTP client library for Python. When using the low-level API via ProxyManager.connectionfromurl.urlopen with assertsamehost=False, cross-origin redirects can still forward sensitive headers. This could allow a remote attacker to gain unauthorized access to sensitiv...

8.2CVSS5.2AI score0.00331EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/08/26 4:50 p.m.10 views

Important: Red Hat Security Advisory: python-urllib3 security update

An update for python-urllib3 is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating,...

8.9CVSS5.3AI score0.0068EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/08/26 4:46 p.m.9 views

CVE-2026-79146

A flaw was found in CustomTabs in Google Chrome. A local attacker could exploit this vulnerability through a co-installed application. This could result in an information leak, allowing the attacker to access cross-origin data...

5.5CVSS5.3AI score0.00106EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:46 p.m.11 views

CVE-2026-79237

An incorrect authorization flaw was found in the Navigation component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499068536...

4.3CVSS5.6AI score0.00339EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/26 4:45 p.m.9 views

CVE-2026-78958

An uninitialized resource flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497205529...

5.9CVSS5.1AI score0.00287EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
added 2026/08/26 4:45 p.m.8 views

CVE-2026-78896

A flaw was found in Google Chrome. This vulnerability, located in the StorageAccessAPI, allows a remote attacker to exploit it by crafting a malicious HTML page. Successful exploitation could lead to an information leak, enabling the attacker to obtain sensitive cross-origin data...

4.3CVSS5.4AI score0.00235EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:36 p.m.10 views

CVE-2026-79274

A flaw was found in chromium-browser. A remote attacker could exploit a vulnerability in the GPU component by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive data from other origins...

4.3CVSS5.4AI score0.00254EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:36 p.m.10 views

CVE-2026-79272

A flaw was found in Google Chrome's FindInPage component. This improper input validation vulnerability could allow a remote attacker, who has compromised the browser's renderer process, to leak sensitive cross-origin data. The attacker could achieve this by tricking a user into visiting a special...

3.1CVSS5.4AI score0.00241EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:25 p.m.8 views

CVE-2026-79016

A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in how Scalable Vector Graphics SVG are handled by crafting a malicious HTML page. This vulnerability allows the attacker to obtain sensitive cross-origin data, potentially leading to information disclosu...

4.3CVSS5.4AI score0.00359EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:25 p.m.11 views

CVE-2026-78986

A flaw was found in Chromium. A remote attacker, after compromising the renderer process, could exploit an uninitialized resource in the Graphics Processing Unit GPU by crafting a malicious HTML page. This could potentially lead to the disclosure of sensitive cross-origin data...

3.1CVSS5.4AI score0.00348EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:25 p.m.7 views

CVE-2026-78960

A flaw was found in Chromium. A remote attacker, leveraging social engineering, could exploit an information leak in Extensions. This vulnerability allows the attacker to obtain cross-origin data by using a specially crafted Chrome extension...

6.5CVSS5.3AI score0.00323EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:25 p.m.9 views

CVE-2026-78962

A flaw was found in WebXR in Google Chrome. An uninitialized resource vulnerability could allow a remote attacker, leveraging social engineering and a crafted HTML page, to potentially leak sensitive cross-origin data. This could expose confidential information from other websites...

4.3CVSS5.4AI score0.00256EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:25 p.m.9 views

CVE-2026-78955

A flaw was found in Google Chrome. An observable discrepancy in the PerformanceAPIs allows a remote attacker to potentially obtain sensitive cross-origin data. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page, leading to unauthorized information...

6.5CVSS5.3AI score0.00441EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:25 p.m.10 views

CVE-2026-78942

A flaw was found in the Loader component of Google Chrome. This vulnerability, caused by incorrect reference resolution, allows a remote attacker to bypass the web origin policy by sending specially crafted network traffic. Bypassing the web origin policy can lead to unauthorized access to...

4.3CVSS5.2AI score0.00318EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:25 p.m.9 views

CVE-2026-78946

A flaw was found in Google Chrome. This incorrect authorization vulnerability in the 'Select' component allows a remote attacker to bypass the web origin policy by crafting a malicious HTML page. This could lead to unauthorized access to sensitive information or actions across different web origi...

4.3CVSS5.3AI score0.00233EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:25 p.m.16 views

CVE-2026-78903

A flaw was found in Google Chrome's Site Isolation feature. This vulnerability, caused by an incomplete cleanup process, could allow a remote attacker to bypass site isolation. To exploit this, the attacker must first compromise the browser's renderer process and then use a specially crafted HTML...

3.1CVSS5.3AI score0.00268EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:25 p.m.11 views

CVE-2026-78949

A flaw was found in Google Chrome CustomTabs. A local attacker, by using a co-installed application, could exploit an observable discrepancy within CustomTabs. This vulnerability could allow the attacker to obtain sensitive cross-origin data, leading to unauthorized information disclosure...

2.9CVSS5.3AI score0.00099EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:25 p.m.11 views

CVE-2026-78936

A flaw was found in CustomTabs in Chromium, affecting Google Chrome on Android. A local attacker, through a co-installed application, could exploit an observable discrepancy to obtain sensitive cross-origin data. This vulnerability leads to information disclosure...

2.9CVSS5.2AI score0.00107EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:24 p.m.11 views

CVE-2026-79193

A flaw was found in chromium-browser's Canvas component. A remote attacker could exploit this vulnerability by crafting a malicious HTML page. This could lead to an information leak, allowing the attacker to access sensitive cross-origin data...

4.3CVSS5.4AI score0.00307EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/26 4:24 p.m.10 views

CVE-2026-79144

An information leak flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501759192...

4.3CVSS5.1AI score0.00254EPSS
SaveExploits0References5
Rows per page
Query Builder