Lucene search
+L

885 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2018-6038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

6.5CVSS7.7AI score0.02009EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2025/08/18 12:00 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2018-6135

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lack of clearing the previous site before loading alerts from a new one in Blink in Google Chrome prior to 67.0.3396.62 allowed a remote attacker to perform...

6.5CVSS7.3AI score0.01677EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/13 2:43 a.m.4 views

CVE-2025-8882

Use after free in Aura in Google Chrome prior to 139.0.7258.127 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

7.2AI score0.00256EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2025/08/13 2:43 a.m.11 views

CVE-2025-8880

Race in V8 in Google Chrome prior to 139.0.7258.127 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.6AI score0.00258EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/08/12 12:00 a.m.10 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome, which can be exploited by remote attackers to perform out-of-bounds memory access via a crafted HTML page...

8.8CVSS6.5AI score0.00303EPSS
SaveExploits0References5
AlpineLinux
AlpineLinux
added 2025/08/07 1:30 a.m.38 views

CVE-2025-8582

Insufficient validation of untrusted input in Core in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

4.3CVSS6.4AI score0.00232EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/07/08 12:00 a.m.14 views

PT-2026-31493

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description A policy bypass issue existed in Blink, a component of Google Chrome. This allowed a remote attacker to perform UI spoofing by using a specially crafted HTML page. The Chromium security...

9.6CVSS5.8AI score0.0048EPSS
SaveExploits0References77
VulnCheck KEV
VulnCheck KEV
added 2025/06/30 12:00 a.m.6 views

VulnCheck KEV: CVE-2025-6554

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.1CVSS5.9AI score0.12723EPSS
SaveIn wildExploits5References10
OSV
OSV
added 2025/06/20 11:08 a.m.5 views

OESA-2025-1650 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. Security Fixes: Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium securi...

5.4CVSS7.1AI score0.00622EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/06/06 12:00 a.m.12 views

The vulnerability of the Google Chrome browser’s messaging service allows attackers to carry out spoofing attacks on Android operating systems.

The vulnerability of the Google Chrome browser’s messaging service on Android operating systems is related to information representation errors in the user interface. Exploiting this vulnerability allows a malicious actor to carry out spam attacks using a specially created HTML page...

7.8CVSS5.5AI score0.00416EPSS
SaveExploits0References5Affected Software3
BDU FSTEC
BDU FSTEC
added 2025/06/04 12:00 a.m.13 views

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to operations that go beyond buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service failure through a specially crafted...

10CVSS8.7AI score0.0753EPSS
SaveExploits3References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/04/09 12:00 a.m.18 views

The vulnerability of Google Chrome, related to errors in the implementation of security checks for standard elements, allows attackers to escalate their privileges.

The vulnerability of Google Chrome is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

10CVSS6.9AI score0.00395EPSS
SaveExploits0References10Affected Software5
OSV
OSV
added 2025/04/02 1:15 a.m.3 views

DEBIAN-CVE-2025-3070

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.9AI score0.00344EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2025/03/27 12:00 a.m.23 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page...

10CVSS8.2AI score0.00639EPSS
SaveExploits0References10Affected Software5
OSV
OSV
added 2025/02/19 5:15 p.m.4 views

DEBIAN-CVE-2025-1426

Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.1AI score0.00593EPSS
SaveExploits0References1
AstraLinux
AstraLinux
added 2025/02/11 7:35 a.m.7 views

Astra Linux – Vulnerability in Chromium

Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Low...

8.8CVSS7.7AI score0.00457EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:00 a.m.13 views

The vulnerability of the Payments component in Google Chrome and Microsoft Edge allows a hacker to bypass existing security restrictions and perform a substitution of the user interface.

The vulnerability of the Payments component in Google Chrome and Microsoft Edge involves exploiting authentication bypass techniques. Exploiting this vulnerability allows a malicious actor to circumvent existing security restrictions and replace the user interface with a specially created HTML pa...

7.8CVSS6.5AI score0.00337EPSS
SaveExploits1References11Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:00 a.m.12 views

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge allows attackers to escalate their privileges.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

10CVSS7.5AI score0.00457EPSS
SaveExploits1References10Affected Software8
BDU FSTEC
BDU FSTEC
added 2025/01/27 12:00 a.m.11 views

The vulnerability of the Extensions component of Google Chrome and Microsoft Edge browsers allows attackers to enhance their privileges.

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge exists due to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created HTML page...

10CVSS7.5AI score0.0045EPSS
SaveExploits1References11Affected Software8
BDU FSTEC
BDU FSTEC
added 2024/11/26 12:00 a.m.23 views

The vulnerability of Google Chrome’s Blink rendering module allows a hacker to replace the user interface.

The vulnerability of Google Chrome’s Blink rendering module is related to improper implementation. Exploiting this vulnerability allows a remote attacker to replace the user interface with a specially created HTML page...

5CVSS5.5AI score0.00414EPSS
SaveExploits0References9Affected Software4
Rows per page
Query Builder