Pterodactyl Panel - Remote Code Execution

Pterodactyl is a free, open-source game server management panel. Using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. id: CVE-2025-49132 info: name: Pterodactyl Panel - Remote Code Execution...

Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

WebProtect Component Access Information Disclosure

The vulnerability in the WebProtect component of Google Chrome and Microsoft Edge is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

WebUI User Interface

The WebUI user interface vulnerability in Google Chrome and Microsoft Edge is related to authorization flaws. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Google Chrome Microsoft Edge Access Information

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to insufficient protection of sensitive data. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information...

ANGLE Library Protected Information Access

The ANGLE library vulnerability in Google Chrome and Microsoft Edge is related to reading data beyond the permissible buffer boundaries. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

ANGLE Library Protected Information Access

The ANGLE library vulnerability in Google Chrome and Microsoft Edge is related to reading data beyond the permissible buffer boundaries. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Workers Component Google Chrome Microsoft Edge Access Information

The vulnerability in the Workers component of Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Media Component Protected Information Access

The Media component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper protection against attacks via external physical channels. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information by using a specially crafted...

Google Chrome Microsoft Edge Access Information

The vulnerability in the Extensions component of Google Chrome and Microsoft Edge is related to authorization errors. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information...

Google Chrome Microsoft Edge Access Information Disclosure

The vulnerability in the Editing component of Google Chrome and Microsoft Edge is related to insufficient validation of user-supplied protected information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

ANGLE Library Protected Information Access

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to gain access to protected information through a specially created HTML page...

Cast component Protected Information Access

The vulnerability in the Cast component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Cast component Protected Information Access

The vulnerability in the Cast component of Google Chrome and Microsoft Edge is related to a flaw in the data source validation mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Speech Component Access Protected Information

The vulnerability in the Speech component of Google Chrome and Microsoft Edge web browsers is related to access control flaws. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Cast component Protected Information Access

The vulnerability in the Cast component of Google Chrome and Microsoft Edge is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Video component Protected Information Access

The vulnerability in the Video component of Google Chrome and Microsoft Edge web browsers is related to the use of an uninitialized resource. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

WebProtect Component Access Information Disclosure

The vulnerability in the WebProtect component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of the state of shared resources. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTM...

Google Chrome Microsoft Edge Access Information Disclosure

The Loader component vulnerability in Google Chrome and Microsoft Edge web browsers is related to the use of a name with an incorrect reference. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information...

Google Chrome Microsoft Edge Access Information Disclosure

The Core component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploiting this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...