Lucene search
+L

24476 matches found

Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-107064

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the WebAudio component. A remote attacker can potentially leak cross-origin data, which refers to data belonging to a different origin domain, protocol, or...

9.6CVSS5.8AI score0.00438EPSS
SaveExploits0References252
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•6 views

PT-2026-107016

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in Permissions allows a remote attacker who has compromised the renderer process and used social engineering to bypass system access restrictions through a crafted...

9.6CVSS5.9AI score0.00438EPSS
SaveExploits0References252
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-107053

Incorrect authorization in Passwords in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6AI score0.00438EPSS
SaveExploits0References251
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•8 views

PT-2026-107069

Incorrect authorization in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6AI score0.00438EPSS
SaveExploits0References251
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-107008

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An observable discrepancy in the Paint process allows a remote attacker to leak cross-origin data, which is information from a different origin than the one serving the page, by using a...

9.6CVSS5.8AI score0.00438EPSS
SaveExploits0References252
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-107032

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Payments component that allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information...

9.6CVSS5.8AI score0.00438EPSS
SaveExploits0References252
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•6 views

PT-2026-107056

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in SiteIsolation allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is a...

9.6CVSS5.8AI score0.00438EPSS
SaveExploits0References252
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-107062

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An issue in the SanitizerAPI allows a remote attacker to leak sensitive information through the use of a crafted HTML page. The SanitizerAPI is a browser interface designed to clean and...

9.6CVSS5.6AI score0.00438EPSS
SaveExploits0References252
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•11 views

PT-2026-107087

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Enterprise component that allows a remote attacker to leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations Updat...

9.6CVSS5.7AI score0.00438EPSS
SaveExploits0References252
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•6 views

PT-2026-106910

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak in Permissions allows a remote attacker to bypass site isolation, which is a security mechanism that ensures web pages from different sites are processed in separate...

9.6CVSS5.6AI score0.00438EPSS
SaveExploits0References253
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-106956

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the Streaming component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote...

9.6CVSS6.5AI score0.00438EPSS
SaveExploits0References253
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-106961

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the Browser component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to entice a user to visit...

9.6CVSS5.9AI score0.00438EPSS
SaveExploits0References252
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•7 views

PT-2026-107002

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Paint component, which allows a remote attacker to leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

9.6CVSS5.7AI score0.00438EPSS
SaveExploits0References252
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•9 views

PT-2026-107052

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An issue exists where a remote attacker can use social engineering and a specially crafted HTML page to spoof UI elements, leading to UI misrepresentation. Recommendations Update Google...

9.6CVSS6AI score0.00438EPSS
SaveExploits0References252
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•8 views

PT-2026-106914

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description Incorrect authorization in the Search component allows a remote attacker to potentially execute arbitrary code outside the sandbox. This is achieved by leveraging social...

9.6CVSS6.7AI score0.00438EPSS
SaveExploits0References253
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•4 views

CVE-2026-106404: Incorrect Authorization

Incorrect authorization in FontAccess in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score0.00217EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•4 views

CVE-2026-106334: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Low...

8.8CVSS5.7AI score0.00276EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•10 views

PT-2026-106996

Incorrect authorization in WebAppInstalls in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6AI score0.00438EPSS
SaveExploits0References251
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•12 views

PT-2026-107009

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS6AI score0.00438EPSS
SaveExploits0References251
RedhatCVE
RedhatCVE
•added 2026/10/05 8:29 p.m.•12 views

CVE-2026-103629

An integer overflow flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://issues.chromium.org/issues/562038679...

8.8CVSS5.8AI score0.00201EPSS
SaveExploits0References5
Rows per page
Query Builder