Lucene search
+L

2511 matches found

CNVD
CNVD
added 2025/11/12 12:0 a.m.12 views

Google Chrome Input Validation Error Vulnerability

Google Chrome is a free web browser developed by Google Inc. Google Chrome suffers from an input validation error vulnerability that stems from insufficient validation of untrustworthy input in Devtools, which can be exploited by an attacker to execute arbitrary code...

8.8CVSS7.4AI score0.00283EPSS
SaveExploits3References1
CNVD
CNVD
added 2025/11/12 12:0 a.m.14 views

Google Chrome Insufficient Policy Enforcement Vulnerability

Google Chrome is a free web browser developed by Google Inc. Google Chrome suffers from a policy enforcement insufficiency vulnerability, which stems from Devtools Policy Enforcement Insufficiency, and can be exploited by an attacker to cause a cross-origin data leak...

5.3CVSS6.8AI score0.00195EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/11/12 12:0 a.m.7 views

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the DevTools set of tools for web development in Google Chrome is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS7.6AI score0.00283EPSS
SaveExploits3References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/11/12 12:0 a.m.15 views

The vulnerability of Google Chrome’s Devtools component allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of Google Chrome’s Devtools component is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

5.3CVSS6AI score0.00195EPSS
SaveExploits1References8Affected Software2
RedhatCVE
RedhatCVE
added 2025/11/10 1:18 p.m.8 views

CVE-2025-52662

A vulnerability in Nuxt DevTools has been fixed in version 2.6.4. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools...

6.9CVSS6.3AI score0.00237EPSS
SaveExploits1References1
GithubExploit
GithubExploit
added 2025/11/08 3:53 p.m.186 views

Exploit for CVE-2025-12907

CVE-2025-12907-...

7.5AI score0.00283EPSS
SaveExploits3
NVD
NVD
added 2025/11/08 12:15 a.m.6 views

CVE-2025-12907

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. Chromium security severity: Low...

8.8CVSS0.00283EPSS
SaveExploits3References2
NVD
NVD
added 2025/11/08 12:15 a.m.9 views

CVE-2025-12909

Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Devtools. Chromium security severity: Low...

5.3CVSS0.00195EPSS
SaveExploits1References2
OSV
OSV
added 2025/11/08 12:15 a.m.6 views

DEBIAN-CVE-2025-12909

Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Devtools. Chromium security severity: Low...

5.3CVSS5.7AI score0.00195EPSS
SaveExploits1References1
OSV
OSV
added 2025/11/08 12:15 a.m.5 views

DEBIAN-CVE-2025-12907

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. Chromium security severity: Low...

8.8CVSS8.6AI score0.00283EPSS
SaveExploits3References1
OSV
OSV
added 2025/11/08 12:15 a.m.6 views

CVE-2025-12907

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. Chromium security severity: Low...

8.8CVSS6.1AI score
SaveExploits0References2
CNNVD
CNNVD
added 2025/11/08 12:0 a.m.10 views

Google Chrome 安全漏洞

Google Chrome is a free web browser developed by Google Inc. Google Chrome suffers from a policy enforcement insufficiency vulnerability, which stems from Devtools Policy Enforcement Insufficiency, and can be exploited by an attacker to cause a cross-origin data leak...

5.3CVSS6.3AI score0.00195EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/11/08 12:0 a.m.11 views

Google Chrome 输入验证错误漏洞

Google Chrome is a free web browser developed by Google Inc. Google Chrome suffers from an input validation error vulnerability that stems from insufficient validation of untrustworthy input in Devtools, which can be exploited by an attacker to execute arbitrary code...

8.8CVSS6.9AI score0.00283EPSS
SaveExploits3References2
Snyk
Snyk
added 2025/11/07 11:46 p.m.9 views

Access Control Bypass

Overview chrome-devtools-frontend is a Chrome DevTools UI Affected versions of this package are vulnerable to Access Control Bypass due to insufficient Content Security Policy enforcement in the Network.loadNetworkResource method of the DevTools protocol network handler. An attacker can exfiltrat...

5.3CVSS6.4AI score0.00195EPSS
SaveExploits1References2
Snyk
Snyk
added 2025/11/07 11:46 p.m.6 views

Improper Neutralization

Overview chrome-devtools-frontend is a Chrome DevTools UI Affected versions of this package are vulnerable to Improper Neutralization due to insufficient sanitization of special whitespace characters in the escapeStringWin function. An attacker can execute arbitrary code by crafting malicious inp...

8.8CVSS7.6AI score0.00283EPSS
SaveExploits3References2
EUVD
EUVD
added 2025/11/07 11:23 p.m.23 views

EUVD-2025-38336

Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Devtools. Chromium security severity: Low...

6.1AI score0.00195EPSS
SaveExploits1References3
CVE
CVE
added 2025/11/07 11:23 p.m.43 views

CVE-2025-12909

CVE-2025-12909 affects Google Chrome via Devtools: Insufficient policy enforcement in Devtools allows a remote attacker to leak cross-origin data. The vulnerability is tied to Chrome versions before 140.0.7339.80. Affected component: Devtools policy enforcement in Chrome/Chromium. Impact per sour...

5.3CVSS6.2AI score0.00195EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2025/11/07 11:23 p.m.11 views

CVE-2025-12909

Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Devtools. Chromium security severity: Low...

0.00195EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/11/07 11:23 p.m.6 views

CVE-2025-12909

Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Devtools. Chromium security severity: Low...

6.2AI score0.00195EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2025/11/07 11:23 p.m.15 views

CVE-2025-12909

Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Devtools. Chromium security severity: Low...

5.3CVSS5.7AI score0.00195EPSS
SaveExploits1
Rows per page
Query Builder