10 matches found
CVE-2026-8522
Google Chrome on Mac versions prior to 148.0.7778.168 is vulnerable to a Use after free flaw in the Downloads component. This memory management issue can be exploited by a remote attacker to execute arbitrary code via a specially crafted HTML page. The vulnerability is classified with Critical se...
CVE-2026-5897
The Google Chrome browser, and the Chromium package, were found to have an incorrect security UI within the Downloads component in versions prior to 147.0.7727.55 . This flaw allows a remote attacker to perform UI spoofing by convincing a user to perform specific UI gestures while interacting wit...
Chromium: CVE-2026-3937 Incorrect security UI in Downloads
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
EUVD-2022-1942
Malicious code in bioql PyPI...
EUVD-2023-44628
Malicious code in bioql PyPI...
CVE-2025-54787
CVE-2025-54787 affects SuiteCRM 7.14.6. There is a vulnerability that allows unauthenticated downloads of files from the upload directory when the file is named by an ID (e.g., attachments). An unauthenticated attacker could download internal files by discovering a valid file-ID, with IDs often b...
CVE-2023-2334 Easy Digital Downloads Google Sheet Connector < 1.6.6 - Access Code Update via CSRF
The edd-google-sheet-connector-pro WordPress plugin before 1.4, Easy Digital Downloads Google Sheet Connector WordPress plugin before 1.6.6 does not have CSRF check when updating its Access Code, which could allow attackers to make logged in admin change the access code to an arbitrary one via a...
OPENSUSE-SU-2023:0368-1 Security update for chromium
This update for chromium fixes the following issues: Chromium 119.0.6045.123 boo1216978 CVE-2023-5996: Use after free in WebAudio Chromium 119.0.6045.105 boo1216783 CVE-2023-5480: Inappropriate implementation in Payments CVE-2023-5482: Insufficient data validation in USB CVE-2023-5849: Integer...
DEBIAN-CVE-2023-5850
Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain spoofing via a crafted domain name. Chromium security severity: Medium...