Lucene search
K

207 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/03/18 1:4 p.m.2 views

Malicious code in proleis-web-file-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245fa1a911f89e0a94db5dda7b80b9f2b64e0bbbbfeb9618b3e013f4da4f212c The package proleis-web-file-input was found to contain malicious code...

5.8AI score
Exploits0
OSV
OSV
added 2026/03/18 1:4 p.m.1 views

MAL-2026-1826 Malicious code in proleis-web-file-input (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 245fa1a911f89e0a94db5dda7b80b9f2b64e0bbbbfeb9618b3e013f4da4f212c The package proleis-web-file-input was found to contain malicious code...

5.8AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/03/07 12:0 a.m.2 views

Fedora 44 : cef (2026-376794abc1)

The remote Fedora 44 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-376794abc1 advisory. Update to cef-145.0.25 + chromium 145.0.7632.75 CVE-2026-1861: Heap buffer overflow in libvpx CVE-2026-1862: Type Confusion in V8 CVE-2026-2313: Use...

8.8CVSS6.4AI score0.23127EPSS
Exploits13References15
OSV
OSV
added 2026/02/19 2:43 a.m.1 views

OPENSUSE-SU-2026:20248-1 Security update for chromium

This update for chromium fixes the following issues: Changes in chromium: - more fixes for desktop file, some variables were lowercased, further adaptions in INSTALL script boo1258199 - also copy rollup into thirdparty/node/nodemodules - stay on llvm-10 for swiftshader but bring a similar patch -...

8.8CVSS6AI score0.23127EPSS
Exploits12References15
Microsoft CVE
Microsoft CVE
added 2026/02/18 2:0 a.m.5 views

Chromium: CVE-2026-2320 Inappropriate implementation in File input

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS5.5AI score0.00035EPSS
Exploits0
Kaspersky
Kaspersky
added 2026/02/17 12:0 a.m.1 views

KLA90894 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Information disclosure vulnerability can be exploited to...

8.8CVSS6AI score0.23127EPSS
Exploits12References10
SUSE CVE
SUSE CVE
added 2026/02/13 12:26 a.m.1 views

SUSE CVE-2026-2322

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.6AI score0.00025EPSS
Exploits0References3
OSV
OSV
added 2026/02/11 7:15 p.m.0 views

CVE-2026-2320

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2026/02/11 7:15 p.m.0 views

CVE-2026-2322

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.8AI score
Exploits0References2
NVD
NVD
added 2026/02/11 7:15 p.m.3 views

CVE-2026-2322

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS0.00025EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2026/02/11 7:15 p.m.1 views

CVE-2026-2322

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.9AI score0.00025EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2026/02/11 7:15 p.m.2 views

CVE-2026-2320

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.9AI score0.00035EPSS
Exploits0References3
Debian CVE
Debian CVE
added 2026/02/11 6:8 p.m.3 views

CVE-2026-2322

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.3AI score0.00025EPSS
Exploits0
Cvelist
Cvelist
added 2026/02/11 6:8 p.m.19 views

CVE-2026-2322

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

0.00025EPSS
Exploits0References2
CVE
CVE
added 2026/02/11 6:8 p.m.454 views

CVE-2026-2322

CVE-2026-2322 concerns Google Chrome (before 145.0.7632.45). An inappropriate implementation in the File input could allow UI spoofing when a user is coerced into performing specific UI gestures on a crafted HTML page. The issue is remotely exploitable via a crafted page but requires user interac...

5.4CVSS5.6AI score0.00025EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added 2026/02/11 6:8 p.m.3 views

CVE-2026-2320

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.3AI score0.00035EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2026/02/11 6:8 p.m.2 views

CVE-2026-2320

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

5.6AI score0.00035EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2026/02/11 6:8 p.m.1 views

CVE-2026-2320

Inappropriate implementation in File input in Google Chrome prior to 145.0.7632.45 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00035EPSS
Exploits0
CVE
CVE
added 2026/02/11 6:8 p.m.8 views

CVE-2026-2320

CVE-2026-2320 describes an inappropriate implementation in Chrome’s File input prior to 145.0.7632.45. A remote attacker can lure a user to perform specific UI gestures on a crafted HTML page, enabling UI spoofing. The description notes affected versions and the attack vector but does not provide...

6.5CVSS5.6AI score0.00035EPSS
Exploits0References2Affected Software1
CNNVD
CNNVD
added 2026/02/10 12:0 a.m.3 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 145.0.7632.45 contained a security vulnerability, which was caused by improper handling of file inputs. This vulnerability could potentially lead users to execute certain UI gestures, resulting in UI...

6.5CVSS6.7AI score0.00035EPSS
Exploits0References3
Rows per page
Query Builder