Lucene search
K

19 matches found

Microsoft CVE
Microsoft CVE
added 2 days ago7 views

Chromium: CVE-2026-10970 Insufficient validation of untrusted input in InterestGroups

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.3CVSS5.4AI score0.0009EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2026/05/08 10:25 p.m.6 views

CVE-2026-7916

An insufficient data validation flaw was found in the InterestGroups component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=498720754...

8.3CVSS5.7AI score0.00099EPSS
Exploits0References5
NVD
NVD
added 2026/05/06 7:16 p.m.1 views

CVE-2026-7916

Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS0.00099EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/05/06 6:12 p.m.4 views

CVE-2026-7916

Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00099EPSS
Exploits0References3Affected Software1
AlpineLinux
AlpineLinux
added 2026/05/06 6:12 p.m.5 views

CVE-2026-7916

Insufficient data validation in InterestGroups in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS5.8AI score0.00099EPSS
Exploits0
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в chromium

Before version 103.0.5060.53, using "use after free" in Interest groups in Google Chrome allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page...

8.8CVSS7.3AI score0.00948EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/01 12:0 a.m.5 views

PT-2026-38109

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description Insufficient data validation in InterestGroups allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. A sandb...

9.6CVSS5.9AI score0.00148EPSS
Exploits0References137
wpexploit
wpexploit
added 2023/03/29 12:0 a.m.134 views

Easy Forms for MailChimp < 6.8.8 - Reflected XSS

The plugin does not sanitise and escape some parameters before outputting them back in the response, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin Make a logged in admin open a page with the following code this requires the attacker to...

6.1CVSS6.3AI score0.00326EPSS
Exploits2
SUSE CVE
SUSE CVE
added 2023/02/15 3:33 a.m.2 views

SUSE CVE-2022-2157

Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.9AI score0.00948EPSS
Exploits0References5
OSV
OSV
added 2022/07/28 1:15 a.m.22 views

CVE-2022-2157

Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9AI score
Exploits0References5
OSV
OSV
added 2022/07/28 1:15 a.m.1 views

DEBIAN-CVE-2022-2157

Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.00948EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/07/28 1:15 a.m.2 views

CVE-2022-2157

Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS5.9AI score0.00948EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2022/07/28 1:15 a.m.30 views

CVE-2022-2157

Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.00948EPSS
Exploits0References1
OSV
OSV
added 2022/07/28 1:15 a.m.1 views

UBUNTU-CVE-2022-2157

Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.00948EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2022/07/28 12:40 a.m.48 views

CVE-2022-2157

Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9AI score0.00948EPSS
Exploits0
OpenVAS
OpenVAS
added 2022/06/27 12:0 a.m.36 views

Mageia: Security Advisory (MGASA-2022-0241)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.2AI score0.01388EPSS
Exploits1References5
Veracode
Veracode
added 2022/06/26 4:57 p.m.28 views

Use-After-Free

chromium is vulnerable to use-after-free. The vulnerability exists in in Interest groups which allows an attacker to cause a memory corruption and there by an application crash...

8.8CVSS8.3AI score0.00948EPSS
Exploits0References9Affected Software2
Microsoft CVE
Microsoft CVE
added 2022/06/23 7:0 a.m.78 views

Chromium: CVE-2022-2157 Use after free in Interest groups

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.00948EPSS
Exploits0
ThreatPost
ThreatPost
added 2011/11/16 1:20 p.m.10 views

Key House Hearing on SOPA Bill Set For Today

All eyes will be on Capitol Hill this morning when the House Judiciary Committee holds a key hearing on the controversial Stop Online Piracy Act, which has drawn wide opposition from a variety of groups and companies for its broad language supposedly designed to prevent copyright infringement. Th...

7AI score
Exploits0References5
Rows per page
Query Builder