Lucene search
+L

297 matches found

AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.4 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in the Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.3CVSS7AI score0.0032EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/05/23 7:25 a.m.12 views

CVE-2024-0811

Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...

4.3CVSS6.1AI score0.00579EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2025/03/06 12:0 a.m.21 views

Linux Distros Unpatched Vulnerability : CVE-2025-0451

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI...

6.3CVSS6.8AI score0.0032EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/03/05 12:0 a.m.13 views

The vulnerability of the Google Chrome browser’s Extensions API allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s Extensions API is related to errors in information representation by the user interface. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through a special extension of Chrome...

7.5CVSS6.9AI score0.0032EPSS
SaveExploits0References10Affected Software4
OSV
OSV
added 2025/02/13 8:57 a.m.12 views

OPENSUSE-SU-2025:0058-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 133.0.6943.53 stable released 2024-02-04 boo1236806 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API - Chromium 133.0.6943.35 beta released...

6.3CVSS7.3AI score0.00338EPSS
SaveExploits0References5
OPENSUSE Linux
OPENSUSE Linux
added 2025/02/13 12:0 a.m.12 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0058-1 Rating: important References: 1236806 Cross-References: CVE-2025-0444 CVE-2025-0445 CVE-2025-0451 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes three vulnerabilities is now...

6.3CVSS7.7AI score0.00338EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2025/02/06 8:0 a.m.24 views

Chromium: CVE-2025-0451 Inappropriate implementation in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.3CVSS6.9AI score0.0032EPSS
SaveExploits0
NVD
NVD
added 2025/02/04 7:15 p.m.15 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.3CVSS0.0032EPSS
SaveExploits0References2
OSV
OSV
added 2025/02/04 7:15 p.m.19 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.3CVSS6.3AI score
SaveExploits0References2
CVE
CVE
added 2025/02/04 6:53 p.m.338 views

CVE-2025-0451

CVE-2025-0451 describes an inappropriate implementation in the Extensions API of Google Chrome prior to version 133.0.6943.53. A remote attacker could induce a user to perform specific UI gestures, enabling UI spoofing via a crafted Chrome Extension. The core issue is in the Extensions API implem...

6.3CVSS6.4AI score0.0032EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2025/02/04 6:53 p.m.9 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.1AI score0.0032EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/02/04 6:53 p.m.13 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.3CVSS7AI score0.0032EPSS
SaveExploits0
Cvelist
Cvelist
added 2025/02/04 6:53 p.m.19 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

0.0032EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/02/04 12:0 a.m.10 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome prior to version 133.0.6943.53, which stems from an improper implementation in the Extensions API that allows remote attackers to convince a user to engage in specific UI gestur...

6.3CVSS6.5AI score0.0032EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2025/02/04 12:0 a.m.16 views

Google Chrome < 133.0.6943.53 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 133.0.6943.53. It is, therefore, affected by multiple vulnerabilities as referenced in the 202502stable-channel-update-for-desktop advisory. - Inappropriate implementation in Extensions API in Google Chrome prior to...

6.3CVSS6.7AI score0.00338EPSS
SaveExploits0References7
FreeBSD
FreeBSD
added 2025/02/04 12:0 a.m.14 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 12 security fixes: 390889644 High CVE-2025-0444: Use after free in Skia. Reported by Francisco Alonso @revskills on 2025-01-19 392521083 High CVE-2025-0445: Use after free in V8. Reported by 303f06e3 on 2025-01-27 40061026 Medium CVE-2025-0451:...

6.3CVSS6.7AI score0.00338EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/03/04 12:0 a.m.69 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10086-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.00815EPSS
SaveExploits3References2
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2024/02/07 12:0 a.m.112 views

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to OS version: 15699.58.0 Browser version: 121.0.6167.159 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta Specific:...

9.8CVSS7.5AI score0.00579EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/01/31 12:0 a.m.5 views

The vulnerability of the Extensions API for Microsoft Edge and Google Chrome browsers allows a perpetrator to access confidential information.

The vulnerability of the Extensions API for Microsoft Edge and Google Chrome relates to improper security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to access confidential information...

5CVSS5.5AI score0.00579EPSS
SaveExploits0References14Affected Software6
CNVD
CNVD
added 2024/01/26 12:0 a.m.23 views

Google Chrome Security Bypass Vulnerability (CNVD-2024-10242)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome version 121.0.6167.85 and prior versions due to an improper implementation in the Extensions API. An attacker can exploit the vulnerability to bypass security restrictions...

4.3CVSS6.3AI score0.00579EPSS
SaveExploits0References1
Rows per page
Query Builder