Lucene search
+L

118617 matches found

Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•13 views

PT-2026-106893

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Passwords component that allows a remote attacker to obtain sensitive information by using a crafted HTML page. Recommendations Update Google Chrome to...

9.6CVSS7.8AI score0.00567EPSS
SaveExploits4References305
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•12 views

PT-2026-106964

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description A use after free issue exists in the GarbageCollection component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A...

9.6CVSS8.4AI score0.00567EPSS
SaveExploits4References306
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•25 views

PT-2026-107026

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Improper resource exposure in Extensions allows a remote attacker to obtain cross-origin data through the use of a crafted HTML page. Recommendations Update Google Chrome to version...

9.6CVSS8.2AI score0.00567EPSS
SaveExploits5References305
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•12 views

PT-2026-107010

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description A UI misrepresentation in the PictureInPicture feature allows a remote attacker to spoof the address bar by using a crafted HTML page. Recommendations Update to version...

9.6CVSS8.1AI score0.00567EPSS
SaveExploits4References304
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•15 views

PT-2026-106996

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description Incorrect authorization in WebAppInstalls allows a remote attacker to bypass system access restrictions by using a crafted HTML page. Recommendations Update Google Chrome on...

9.6CVSS8.2AI score0.00567EPSS
SaveExploits4References304
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•13 views

PT-2026-107020

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Animation component that allows a remote attacker to leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

9.6CVSS7.8AI score0.00567EPSS
SaveExploits4References305
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•6 views

CVE-2026-106321: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Editing in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to leak sensitive information via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00194EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•7 views

CVE-2026-106342: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.5AI score0.00305EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•7 views

CVE-2026-106344: Missing Authorization

Missing authorization in Permissions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.8AI score0.00181EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•7 views

CVE-2026-106393: Use After Free

Use after free in Storage in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS7.5AI score0.00302EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•7 views

CVE-2026-106407: Incorrect Authorization

Incorrect authorization in GetUserMedia in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.9AI score0.00217EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•7 views

CVE-2026-106360: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Payments in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.6AI score0.00252EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•8 views

CVE-2026-106368: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in UI in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof UI elements via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•18 views

PT-2026-107087

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Enterprise component that allows a remote attacker to leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations Updat...

9.6CVSS7.8AI score0.00567EPSS
SaveExploits4References305
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•16 views

PT-2026-107041

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Missing authorization in the Translate feature allows a remote attacker who has compromised the renderer process to bypass site isolation by using a crafted HTML page. Site isolation is...

9.6CVSS7.9AI score0.00567EPSS
SaveExploits4References305
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•11 views

PT-2026-107032

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Payments component that allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data refers to information...

9.6CVSS7.8AI score0.00567EPSS
SaveExploits4References305
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•13 views

PT-2026-107002

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description An information leak exists in the Paint component, which allows a remote attacker to leak sensitive information by inducing a user to visit a crafted HTML page. Recommendations Update...

9.6CVSS7.8AI score0.00567EPSS
SaveExploits4References305
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•16 views

PT-2026-107079

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 155.0.8059.39 Description Incorrect authorization in the GetUserMedia function allows a remote attacker who has compromised the renderer process to bypass system access restrictions by using a crafted HTML page...

9.6CVSS8.1AI score0.00567EPSS
SaveExploits4References306
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•13 views

PT-2026-107053

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 155.0.8059.39 Description Incorrect authorization in the passwords feature allows a remote attacker to bypass the web origin policy, which is a security mechanism that prevents scripts on one page from...

9.6CVSS8.1AI score0.00567EPSS
SaveExploits4References305
Positive Technologies
Positive Technologies
•added 2026/10/06 12:00 a.m.•18 views

PT-2026-107040

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 155.0.8059.39 Description UI misrepresentation in the user interface allows a remote attacker to spoof UI elements by using a crafted HTML page. Recommendations Update to version 155.0.8059.39 or late...

9.6CVSS8.1AI score0.00567EPSS
SaveExploits4References304
Rows per page
Query Builder