Lucene search
+L

119 matches found

Positive Technologies
Positive Technologies
added 2026/06/17 12:0 a.m.22 views

PT-2026-50190

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description A use after free issue in DigitalCredentials on Windows allows a remote attacker to potentially perform a sandbox escape by using a crafted HTML page. Use after free occurs when an...

9.6CVSS6.1AI score0.00613EPSS
SaveExploits0References41
Tenable Nessus
Tenable Nessus
added 2026/06/17 12:0 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-12440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DigitalCredentials in Google Chrome on Windows prior to 149.0.7827.155 allowed a remote attacker to potentially perform a sandbox escape via a...

9.6CVSS6.2AI score0.00251EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/06/17 12:0 a.m.14 views

Linux Distros Unpatched Vulnerability : CVE-2026-12451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially...

8.3CVSS6.2AI score0.00176EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/17 12:0 a.m.29 views

PT-2026-50189

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description A use after free issue in Digital Credentials allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. Use after free is a condition where a program...

9.6CVSS5.8AI score0.00613EPSS
SaveExploits0References41
Tenable Nessus
Tenable Nessus
added 2026/06/17 12:0 a.m.11 views

Linux Distros Unpatched Vulnerability : CVE-2026-12439

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Digital Credentials in Google Chrome prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HT...

8.8CVSS6.2AI score0.0033EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/06/17 12:0 a.m.27 views

PT-2026-50201

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description A use-after-free issue exists in DigitalCredentials. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

9.6CVSS6.3AI score0.00613EPSS
SaveExploits0References42
Tenable Nessus
Tenable Nessus
added 2026/06/16 12:0 a.m.34 views

Google Chrome < 149.0.7827.155 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 149.0.7827.155. It is, therefore, affected by multiple vulnerabilities as referenced in the 202606stable-channel-update-for-desktop01750511403 advisory. - Use after free in Extensions in Google Chrome prior to...

9.6CVSS6AI score0.00613EPSS
SaveExploits0References67
Tenable Nessus
Tenable Nessus
added 2026/06/16 12:0 a.m.10 views

Google Chrome < 149.0.7827.155 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 149.0.7827.155. It is, therefore, affected by multiple vulnerabilities as referenced in the 202606stable-channel-update-for-desktop01750511403 advisory. - Use after free in Extensions in Google Chrome prior to...

9.6CVSS6AI score0.00613EPSS
SaveExploits0References67
Microsoft CVE
Microsoft CVE
added 2026/06/15 2:0 p.m.15 views

Chromium: CVE-2026-12008 Use after free  DigitalCredentials

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.3CVSS5.2AI score0.00246EPSS
SaveExploits0
EUVD
EUVD
added 2026/06/12 12:31 a.m.10 views

EUVD-2026-36329

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS5.5AI score0.00246EPSS
SaveExploits0References3
NVD
NVD
added 2026/06/11 10:16 p.m.13 views

CVE-2026-12008

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS0.00246EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/06/11 8:48 p.m.52 views

CVE-2026-12008

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

0.00246EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/06/11 8:48 p.m.11 views

CVE-2026-12008

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS5.3AI score0.00246EPSS
SaveExploits0
Vulnrichment
Vulnrichment
added 2026/06/11 8:48 p.m.11 views

CVE-2026-12008

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

5.5AI score0.00246EPSS
SaveExploits0References2
CVE
CVE
added 2026/06/11 8:48 p.m.77 views

CVE-2026-12008

CVE-2026-12008 : In Google Chrome, a Use-after-free in DigitalCredentials (pre-149.0.7827.115) could allow a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The Chrome Stable update (149.0.7827.114/115 for Windows/Mac; 149.0.7827...

8.3CVSS5.5AI score0.00246EPSS
SaveExploits0References2Affected Software1
FreeBSD
FreeBSD
added 2026/06/11 12:0 a.m.16 views

chromium -- security fixes

Chrome Releases reports: This update includes 33 security fixes: 516496659 Critical CVE-2026-12437: Use after free in WebShare. 516947912 Critical CVE-2026-12438: Inappropriate implementation in WebView. 519728275 Critical CVE-2026-12439: Use after free in Digital Credentials. 519731619 Critical...

9.6CVSS5.5AI score0.00613EPSS
SaveExploits0References1
Redos
Redos
added 2026/05/20 12:0 a.m.14 views

ROS-20260520-73-0022

A vulnerability in the Digital Credentials API component of Google Chrome and Microsoft Edge browsers is related to the ability to use memory after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service using a specially crafted...

8.8CVSS5.7AI score0.00253EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2026/03/28 12:0 a.m.8 views

Fedora 42 : chromium (2026-cc466cfb57)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cc466cfb57 advisory. Update to 146.0.7680.164 High CVE-2026-4673: Heap buffer overflow in WebAudio High CVE-2026-4674: Out of bounds read in CSS High CVE-2026-4675: Heap...

8.8CVSS6.2AI score0.00504EPSS
SaveExploits2References35
BDU FSTEC
BDU FSTEC
added 2026/03/25 12:0 a.m.6 views

The vulnerability of the Digital Credentials API component in browsers Google Chrome and Microsoft Edge allows a perpetrator to trigger a service failure.

The vulnerability of the Digital Credentials API for Google Chrome and Microsoft Edge browsers relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

10CVSS5.8AI score0.00253EPSS
SaveExploits0References9Affected Software4
OSV
OSV
added 2026/03/24 7:22 a.m.12 views

OPENSUSE-SU-2026:20422-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 146.0.7680.153 boo1259964: CVE-2026-4439: Out of bounds memory access in WebGL CVE-2026-4440: Out of bounds read and write in WebGL CVE-2026-4441: Use after free in Base CVE-2026-4442: Heap buffer overflow in CSS...

8.8CVSS6.1AI score0.00415EPSS
SaveExploits2References27
Rows per page
Query Builder