Lucene search
+L

146 matches found

Tenable Nessus
Tenable Nessus
•added 2026/06/16 12:00 a.m.•22 views

Google Chrome < 149.0.7827.155 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 149.0.7827.155. It is, therefore, affected by multiple vulnerabilities as referenced in the 202606stable-channel-update-for-desktop01750511403 advisory. - Use after free in Extensions in Google Chrome prior to...

9.6CVSS8.2AI score0.00613EPSS
SaveExploits0References67
Tenable Nessus
Tenable Nessus
•added 2026/06/16 12:00 a.m.•68 views

Google Chrome < 149.0.7827.155 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 149.0.7827.155. It is, therefore, affected by multiple vulnerabilities as referenced in the 202606stable-channel-update-for-desktop01750511403 advisory. - Use after free in Extensions in Google Chrome prior to...

9.6CVSS8.2AI score0.00613EPSS
SaveExploits0References67
Kaspersky
Kaspersky
•added 2026/06/16 12:00 a.m.•94 views

KLA91107 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, obtain sensitive information, inject malicious code, gain privileges, perform cross-site scripting attack. Belo...

9.6CVSS7.3AI score0.00613EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2026/06/15 2:00 p.m.•29 views

Chromium: CVE-2026-12008 Use after free  DigitalCredentials

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.3CVSS7.6AI score0.00246EPSS
SaveExploits0
EUVD
EUVD
•added 2026/06/12 12:31 a.m.•22 views

EUVD-2026-36329

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS8.4AI score0.00246EPSS
SaveExploits0References3
NVD
NVD
•added 2026/06/11 10:16 p.m.•24 views

CVE-2026-12008

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS0.00246EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/06/11 10:16 p.m.•10 views

CVE-2026-12008

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS8.4AI score0.00246EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/06/11 8:48 p.m.•63 views

CVE-2026-12008

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

0.00246EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/11 8:48 p.m.•15 views

CVE-2026-12008

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.4AI score0.00246EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/06/11 8:48 p.m.•29 views

CVE-2026-12008

Use after free in DigitalCredentials in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS8.4AI score0.00246EPSS
SaveExploits0
CVE
CVE
•added 2026/06/11 8:48 p.m.•129 views

CVE-2026-12008

A use-after-free vulnerability exists in the DigitalCredentials component of Google Chrome (and Microsoft Edge ) prior to version 149.0.7827.115 . This flaw allows a remote attacker who has already compromised the renderer process to perform a sandbox escape by navigating to a specially crafted H...

8.3CVSS8.4AI score0.00246EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/06/11 12:00 a.m.•35 views

PT-2026-50189

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description A use after free issue in Digital Credentials allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. Use after free is a condition where a program...

10CVSS7.4AI score0.0033EPSS
SaveExploits0
FreeBSD
FreeBSD
•added 2026/06/11 12:00 a.m.•31 views

chromium -- security fixes

Chrome Releases reports: This update includes 33 security fixes: 516496659 Critical CVE-2026-12437: Use after free in WebShare. 516947912 Critical CVE-2026-12438: Inappropriate implementation in WebView. 519728275 Critical CVE-2026-12439: Use after free in Digital Credentials. 519731619 Critical...

9.6CVSS7.1AI score0.00613EPSS
SaveExploits0References1
Redos
Redos
•added 2026/05/20 12:00 a.m.•24 views

ROS-20260520-73-0022

A vulnerability in the Digital Credentials API component of Google Chrome and Microsoft Edge browsers is related to the ability to use memory after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service using a specially crafted...

8.8CVSS7.4AI score0.0033EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/05/19 12:00 a.m.•38 views

PT-2026-50201

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.155 Description A use-after-free issue exists in DigitalCredentials. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attack...

8.3CVSS7.2AI score0.00176EPSS
SaveExploits0
AstraLinux
AstraLinux
•added 2026/04/01 3:55 a.m.•16 views

Astra Linux – Vulnerability in Chromium

The incorrect security interface in Digital Credentials in Google Chrome prior to version 144.0.7559.59 allowed a remote attacker to perform domain spoofing through a crafted HTML page. Chromium security severity: Medium...

5.4CVSS5.9AI score0.00188EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/03/28 12:00 a.m.•14 views

Fedora 42 : chromium (2026-cc466cfb57)

The remote Fedora 42 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-cc466cfb57 advisory. Update to 146.0.7680.164 High CVE-2026-4673: Heap buffer overflow in WebAudio High CVE-2026-4674: Out of bounds read in CSS High CVE-2026-4675: Heap...

8.8CVSS7.6AI score0.00546EPSS
SaveExploits2References35
BDU FSTEC
BDU FSTEC
•added 2026/03/25 12:00 a.m.•15 views

The vulnerability of the Digital Credentials API component in browsers Google Chrome and Microsoft Edge allows a perpetrator to trigger a service failure.

The vulnerability of the Digital Credentials API for Google Chrome and Microsoft Edge browsers relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially created HTML page...

10CVSS7.9AI score0.0033EPSS
SaveExploits0References12Affected Software7
OSV
OSV
•added 2026/03/24 7:22 a.m.•15 views

OPENSUSE-SU-2026:20422-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - Chromium 146.0.7680.153 boo1259964: CVE-2026-4439: Out of bounds memory access in WebGL CVE-2026-4440: Out of bounds read and write in WebGL CVE-2026-4441: Use after free in Base CVE-2026-4442: Heap buffer overflow in CSS...

8.8CVSS7.3AI score0.00546EPSS
SaveExploits2References27
Microsoft CVE
Microsoft CVE
•added 2026/03/23 7:45 a.m.•14 views

Chromium: CVE-2026-4456 Use after free in Digital Credentials API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS7.7AI score0.0033EPSS
SaveExploits0
Rows per page
Query Builder