Lucene search
K

369 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.3 views

Astra Linux - уязвимость в chromium

Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6.8AI score0.00859EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/04/01 12:0 a.m.2 views

PT-2026-38108

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 148.0.7778.96 Description Insufficient data validation in DevTools allows a remote attacker to bypass navigation restrictions through the use of a crafted HTML page. Recommendations Update to version...

9.6CVSS5.8AI score0.00148EPSS
Exploits0References137
Tenable Nessus
Tenable Nessus
added 2026/03/10 12:0 a.m.2 views

Fedora 43 : chromium (2026-f62db6b372)

The remote Fedora 43 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-f62db6b372 advisory. Update to 145.0.7632.159 CVE-2026-3536: Integer overflow in ANGLE CVE-2026-3537: Object lifecycle issue in PowerVR CVE-2026-3538: Integer overflow i...

9.6CVSS6.2AI score0.00134EPSS
Exploits0References11
Microsoft CVE
Microsoft CVE
added 2026/03/07 5:23 a.m.8 views

Chromium: CVE-2026-3545 Insufficient data validation in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

9.6CVSS5.8AI score0.00134EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-7954

Malware in sbrugna...

7.8CVSS8.6AI score0.00025EPSS
Exploits0References11
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2020-7983

Malware in sbrugna...

8.8CVSS9.1AI score0.0042EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-9213

Malware in sbrugna...

6.5CVSS7.8AI score0.00159EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-27720

Malware in sbrugna...

4.3CVSS7.1AI score0.00959EPSS
Exploits1References11
EUVD
EUVD
added 2025/10/03 8:7 p.m.0 views

EUVD-2023-35238

Malicious code in bioql PyPI...

9.9CVSS9.1AI score0.02639EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/06/26 12:0 a.m.5 views

Microsoft Edge (Chromium) < 138.0.3351.55 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 138.0.3351.55. It is, therefore, affected by multiple vulnerabilities as referenced in the June 26, 2025 advisory. - Insufficient data validation in DevTools in Google Chrome on Windows prior to 138.0.7204.49 allowed a...

6.5CVSS6.4AI score0.01199EPSS
Exploits0References13
CVE
CVE
added 2025/06/24 8:3 p.m.299 views

CVE-2025-6557

The CVE-2025-6557 entry concerns Google Chrome on Windows with an insufficient DevTools data validation flaw that could allow arbitrary code execution via a crafted HTML page after user interaction with specific UI gestures. Affected component: DevTools in Chrome; root cause: inadequate input val...

5.4CVSS7.5AI score0.00228EPSS
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/06/24 12:0 a.m.1 views

PT-2025-26787 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 138.0.7204.49 Description: Insufficient data validation in DevTools in Google Chrome on Windows allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a...

6.4CVSS6.6AI score0.00228EPSS
Exploits0References24
OpenVAS
OpenVAS
added 2025/05/26 12:0 a.m.8 views

Fedora: Security Advisory (FEDORA-2025-8fbc37e703)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.8AI score0.00195EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 7:12 a.m.2 views

CVE-2024-7023

Insufficient data validation in Updater in Google Chrome prior to 128.0.6537.0 allowed a remote attacker to perform privilege escalation via a malicious file. Chromium security severity: Medium...

8.8CVSS6.5AI score0.00655EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2025/05/23 6:23 a.m.2 views

CVE-2024-7977

Insufficient data validation in Installer in Google Chrome on Windows prior to 128.0.6613.84 allowed a local attacker to perform privilege escalation via a malicious file. Chromium security severity: Medium...

7.8CVSS7.2AI score0.00028EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/22 7:55 a.m.4 views

CVE-2018-17460

Insufficient data validation in filesystem URIs in Google Chrome prior to 68.0.3440.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted domain name...

6.5CVSS5.9AI score0.00159EPSS
Exploits0References1
CNVD
CNVD
added 2025/05/14 12:0 a.m.10 views

Google Chrome Security Bypass Vulnerability (CNVD-2025-10056)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome prior to version 136.0.7103.59, which stems from insufficient data validation in DevTools, and can be exploited by an attacker to cause an access control bypass...

6.3CVSS6.8AI score0.00124EPSS
Exploits0References1
OSV
OSV
added 2025/05/05 6:15 p.m.8 views

CVE-2025-4051

Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS5.8AI score
Exploits0References2
Debian CVE
Debian CVE
added 2025/05/05 6:10 p.m.6 views

CVE-2025-4051

Insufficient data validation in DevTools in Google Chrome prior to 136.0.7103.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

6.3CVSS7AI score0.00124EPSS
Exploits0
CVE
CVE
added 2025/05/05 6:10 p.m.215 views

CVE-2025-4051

CVE-2025-4051 involves insufficient data validation in DevTools of Google Chrome/Chromium, allowing a remote attacker to bypass discretionary access control when a user is persuaded to perform specific UI gestures on a crafted HTML page. The vulnerability affects Chrome before version 136.0.7103....

6.3CVSS5.9AI score0.00124EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder