Lucene search
K

44 matches found

RedhatCVE
RedhatCVE
added 2026/06/07 4:58 a.m.8 views

CVE-2026-11114

An use after free flaw was found in the Device Trust component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501360342...

9.6CVSS5.4AI score0.00234EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2026/06/07 4:44 a.m.8 views

SUSE CVE-2026-11114

Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.5AI score0.00234EPSS
Exploits0References2
Microsoft CVE
Microsoft CVE
added 2026/06/05 2:0 p.m.7 views

Chromium: CVE-2026-11114 Use after free in Device Trust

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

9.6CVSS5.4AI score0.00234EPSS
Exploits0
EUVD
EUVD
added 2026/06/05 12:31 a.m.8 views

EUVD-2026-34575

Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00234EPSS
Exploits0References3
NVD
NVD
added 2026/06/04 11:17 p.m.5 views

CVE-2026-11114

Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS0.00234EPSS
Exploits0References2
OSV
OSV
added 2026/06/04 11:17 p.m.5 views

DEBIAN-CVE-2026-11114

Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.5AI score0.00234EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/06/04 11:5 p.m.29 views

CVE-2026-11114

Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

0.00234EPSS
Exploits0References2
CVE
CVE
added 2026/06/04 11:5 p.m.17 views

CVE-2026-11114

CVE-2026-11114 : A use-after-free in Chrome’s Device Trust feature on macOS allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Affected software: Google Chrome on Mac, prior to version 149.0.7827.53 . Root cause and i...

9.6CVSS5.8AI score0.00234EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/06/04 11:5 p.m.7 views

CVE-2026-11114

Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.5AI score0.00234EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2026/06/04 11:5 p.m.7 views

CVE-2026-11114

Use after free in Device Trust in Google Chrome on Mac prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

5.5AI score0.00234EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/06/04 12:0 a.m.14 views

PT-2026-46641

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 149.0.7827.53 Description A use after free issue exists in Device Trust. A remote attacker who has compromised the renderer process can potentially perform a sandbox escape by using a crafted HTML page. U...

9.6CVSS5.8AI score0.00985EPSS
Exploits0References433
CNNVD
CNNVD
added 2026/06/02 12:0 a.m.4 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. in the United States. Form is an open-source form state management tool developed by TanStack. Versions of Google Chrome prior to 149.0.7827.53 contained a resource management vulnerability. This vulnerability stemmed from a problem with the...

9.6CVSS5.4AI score0.00234EPSS
Exploits0References3
AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.5 views

Astra Linux - уязвимость в chromium

The use of after free in Device Trust Connectors in Google Chrome before version 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

8.8CVSS7.3AI score0.00829EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/16 12:0 a.m.5 views

PT-2026-33362

Name of the Vulnerable Software and Affected Versions Esri Portal for ArcGIS versions 11.4 through 12.0 Description An incorrect authorization issue exists where the system fails to correctly check permissions assigned to developer credentials. This flaw allows low-privilege users to generate...

9.8CVSS5.8AI score0.00312EPSS
Exploits0References8
The Hacker News
The Hacker News
added 2025/12/09 11:30 a.m.6 views

How to Streamline Zero Trust Using the Shared Signals Framework

Zero Trust helps organizations shrink their attack surface and respond to threats faster, but many still struggle to implement it because their security tools don't share signals reliably. 88% of organizations admit they've suffered significant challenges in trying to implement such approaches,...

6.6AI score
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2020-27069

Malware in sbrugna...

6.1CVSS6.3AI score0.00641EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.6 views

EUVD-2023-0105

Malicious code in bioql PyPI...

2.8CVSS3.6AI score0.00203EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/05/22 4:44 p.m.10 views

CVE-2020-5915

In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, an undisclosed TMUI page contains a vulnerability which allows a stored XSS when BIG-IP systems are setup in a device trust...

6.1CVSS5.8AI score0.00641EPSS
Exploits0References1
The Hacker News
The Hacker News
added 2025/04/21 11:25 a.m.21 views

5 Reasons Device Management Isn't Device Trust​

The problem is simple: all breaches start with initial access, and initial access comes down to two primary attack vectors – credentials and devices. This is not news; every report you can find on the threat landscape depicts the same picture. The solution is more complex. For this article, we'll...

7.2AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/02/05 7:31 p.m.10 views

CVE-2022-39248

matrix-android-sdk2 is the Matrix SDK for Android. Prior to version 1.5.1, an attacker cooperating with a malicious homeserver can construct messages that legitimately appear to have come from another person, without any indication such as a grey shield. Additionally, a sophisticated attacker...

8.6CVSS6.7AI score0.0072EPSS
Exploits0References1
Rows per page
Query Builder