Lucene search
+L

176 matches found

NVD
NVD
•added 2026/10/31 10:16 a.m.•9 views

CVE-2026-118598

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...

6.5CVSS0.00469EPSS
SaveExploits0References4
CVE
CVE
•added 2026/10/31 9:29 a.m.•17 views

CVE-2026-118598

A logic error in Epiphany (>= 45.0, through 51.x) allows a malicious website to bypass prompts for camera and microphone access. When a user approves a Clipboard or Website Data Access permission, the set_permission() function in src/ephy-window.c incorrectly falls into a branch that grants EP...

6.5CVSS5.6AI score0.00469EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2026/10/31 9:29 a.m.•7 views

CVE-2026-118598 epiphany: clipboard/website-data permission prompt incorrectly grants camera and microphone access

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...

6.5CVSS5.7AI score
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/31 12:00 a.m.•5 views

CVE-2026-118598: GNOME Epiphany: A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user…

A logic error in Epiphany's site permission handling can cause camera and microphone access to be granted when the user only approves a different permission. In src/ephy-window.c, setpermission stores the user's Allow/Deny choice after a WebKit permission dialog. Types CLIPBOARD and...

6.5CVSS5.7AI score0.00469EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/10/26 12:00 a.m.•11 views

Google Chrome Microsoft Edge Access Information

The vulnerability in the GetUserMedia component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of input protected information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTM...

5CVSS5.7AI score0.00342EPSS
SaveExploits0References9Affected Software4
SUSE CVE
SUSE CVE
•added 2026/10/21 4:40 p.m.•11 views

SUSE CVE-2026-113070

Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score0.00302EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/21 12:32 a.m.•7 views

EUVD-2026-105502

Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6AI score0.00302EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/10/21 12:02 a.m.•12 views

CVE-2026-113070

A flaw was found in chromium-browser. An out-of-bounds read vulnerability in the GetUserMedia component allows a remote attacker to read memory inside the browser sandbox by enticing a user to view a crafted HTML page. This issue results in information disclosure and may expose sensitive data...

6.5CVSS5.8AI score0.00302EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/10/21 12:00 a.m.•8 views

Linux Distros Unpatched Vulnerability : CVE-2026-113070

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page...

6.5CVSS6AI score0.00302EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/20 10:18 p.m.•9 views

CVE-2026-113070

Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00302EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/20 10:18 p.m.•12 views

DEBIAN-CVE-2026-113070

Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score0.00302EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/10/20 10:18 p.m.•10 views

CVE-2026-113070

Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score0.00302EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/20 9:02 p.m.•23 views

CVE-2026-113070

Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

0.00302EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/10/20 9:02 p.m.•6 views

CVE-2026-113070

Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6AI score0.00302EPSS
SaveExploits0References2
CVE
CVE
•added 2026/10/20 9:02 p.m.•95 views

CVE-2026-113070

Google Chrome versions prior to 156.0.8078.47 are vulnerable to an out-of-bounds read within the GetUserMedia component. A remote attacker can exploit this flaw by enticing a user to view a crafted HTML page , which allows the attacker to read memory inside the browser sandbox. This vulnerability...

6.5CVSS6AI score0.00302EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/10/20 9:02 p.m.•11 views

CVE-2026-113070

Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score0.00302EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/20 12:00 a.m.•7 views

Google Chrome Vulnerability: CVE-2026-113070

Out of bounds read in GetUserMedia in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score0.00302EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/20 12:00 a.m.•12 views

PT-2026-118767

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 156.0.8078.47 Description An out of bounds read exists in the GetUserMedia function. This allows a remote attacker to read memory within the sandbox by using a specially crafted HTML page. Recommendations Update...

9.6CVSS6AI score0.00601EPSS
SaveExploits8References358
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•13 views

Astra Linux – Vulnerability in Chromium

Incorrect authorization in the GetUserMedia function in Google Chrome prior to version 152.0.7977.65 allowed a remote attacker to obtain sensitive information through a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.5AI score0.00229EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/10/15 3:53 p.m.•11 views

Astra Linux – Vulnerability in Chromium

Incomplete cleanup in GetUserMedia in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.9AI score0.00308EPSS
SaveExploits0References2
Rows per page
Query Builder