Lucene search
+L

32 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:41 p.m.•15 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page...

6.5CVSS7AI score0.03036EPSS
SaveExploits0References1
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•10 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in downloads within Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass enterprise policy restrictions through a malicious download. Chromium security severity: Medium...

4.3CVSS5.8AI score0.00638EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/06 7:16 p.m.•15 views

CVE-2026-7932

Insufficient policy enforcement in Downloads in Google Chrome prior to 148.0.7778.96 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

4.4CVSS0.00099EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/05/06 6:12 p.m.•15 views

CVE-2026-7932

Insufficient policy enforcement in Downloads in Google Chrome prior to 148.0.7778.96 allowed a local attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...

4.4CVSS5.7AI score0.00099EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/05/05 12:00 a.m.•19 views

PT-2026-38125

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description Insufficient policy enforcement in Downloads allows a local attacker to bypass navigation restrictions by using a crafted HTML page. Recommendations Update to version 148.0.7778.96 or...

9.6CVSS6.2AI score0.00573EPSS
SaveExploits1References397
Kaspersky
Kaspersky
•added 2026/04/10 12:00 a.m.•15 views

KLA90976 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, obtain sensitive information, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Heap...

9.6CVSS7.5AI score0.00523EPSS
SaveExploits0References65
SUSE CVE
SUSE CVE
•added 2026/04/09 11:29 p.m.•17 views

SUSE CVE-2026-5900

Policy bypass in Downloads in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to bypass of multi-download protections via a crafted HTML page. Chromium security severity: Low...

4.3CVSS6.2AI score0.00242EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2023/09/16 2:05 a.m.•9 views

SUSE CVE-2023-4904

Insufficient policy enforcement in Downloads in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Enterprise policy restrictions via a crafted download. Chromium security severity: Medium...

4.3CVSS8.8AI score0.00638EPSS
SaveExploits0References4
OSV
OSV
•added 2023/09/12 9:15 p.m.•12 views

DEBIAN-CVE-2023-4904

Insufficient policy enforcement in Downloads in Google Chrome prior to 117.0.5938.62 allowed a remote attacker to bypass Enterprise policy restrictions via a crafted download. Chromium security severity: Medium...

4.3CVSS8.6AI score0.00638EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
•added 2023/02/15 4:03 a.m.•9 views

SUSE CVE-2020-6402

Insufficient policy enforcement in downloads in Google Chrome on OS X prior to 80.0.3987.87 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension...

8.8CVSS7.9AI score0.02662EPSS
SaveExploits0References6
SUSE CVE
SUSE CVE
•added 2023/02/15 3:46 a.m.•8 views

SUSE CVE-2021-21133

Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page...

6.5CVSS6.8AI score0.03036EPSS
SaveExploits0References7
NVD
NVD
•added 2022/09/26 4:15 p.m.•23 views

CVE-2022-3047

Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page...

6.5CVSS0.00574EPSS
SaveExploits0References4
OSV
OSV
•added 2022/09/26 4:15 p.m.•6 views

DEBIAN-CVE-2022-3047

Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page...

6.5CVSS7AI score0.00574EPSS
SaveExploits0References1
OSV
OSV
•added 2022/09/26 4:15 p.m.•27 views

CVE-2022-3047

Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page...

6.5CVSS8.4AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/09/26 4:15 p.m.•45 views

CVE-2022-3047

Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page...

6.5CVSS6.9AI score0.00574EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2022/09/26 3:01 p.m.•75 views

CVE-2022-3047

Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page...

6.5CVSS7.3AI score0.00574EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/26 12:00 a.m.•2 views

CVE-2022-3047: Client-Side Enforcement of Server-Side Security

Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page...

6.5CVSS6.4AI score0.00574EPSS
SaveExploits0References2
Veracode
Veracode
•added 2022/09/16 7:25 p.m.•35 views

Policy Enforcement Bypass

chromium has bypass of policy enforcement. Insufficient policy enforcement in Extensions API in Google Chrome allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page...

6.5CVSS6.8AI score0.00574EPSS
SaveExploits0References6Affected Software2
OSV
OSV
•added 2022/07/27 10:15 p.m.•4 views

DEBIAN-CVE-2022-1872

Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page...

4.3CVSS6.2AI score0.00563EPSS
SaveExploits0References1
OSV
OSV
•added 2022/07/27 10:15 p.m.•23 views

CVE-2022-1872

Insufficient policy enforcement in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass downloads policy via a crafted HTML page...

4.3CVSS8.5AI score
SaveExploits0References3
Rows per page
Query Builder