Lucene search
+L

4741 matches found

Cvelist
Cvelist
added 2026/01/20 4:14 a.m.26 views

CVE-2026-0899

Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

0.00382EPSS
SaveExploits0References2
OSV
OSV
added 2026/01/20 3:25 a.m.8 views

MGASA-2026-0013 Updated nss & firefox packages fix security vulnerabilities

Mitigation bypass in the DOM: Security component. CVE-2026-0877 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. CVE-2026-0878 Sandbox escape due to incorrect boundary conditions in the Graphics component. CVE-2026-0879 Sandbox escape due to integer...

9.8CVSS5.6AI score0.0057EPSS
SaveExploits0References5
Mageia
Mageia
added 2026/01/20 3:25 a.m.12 views

Updated thunderbird packages fix security vulnerabilities

Mitigation bypass in the DOM: Security component. CVE-2026-0877 Sandbox escape due to incorrect boundary conditions in the Graphics: CanvasWebGL component. CVE-2026-0878 Sandbox escape due to incorrect boundary conditions in the Graphics component. CVE-2026-0879 Sandbox escape due to integer...

9.8CVSS5.6AI score0.0057EPSS
SaveExploits0References3
FreeBSD
FreeBSD
added 2026/01/20 12:0 a.m.5 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 1 security fix: 473851441 High CVE-2026-1220: Race in V8. Reported by @p1nky4745 on 2026-01-07...

7.5CVSS5.4AI score0.00297EPSS
SaveExploits1References1
SUSE Linux
SUSE Linux
added 2026/01/19 11:14 a.m.7 views

Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: MFSA 2026-05 bsc1256340: CVE-2026-0877: Mitigation bypass in the DOM in Security component CVE-2026-0878: Sandbox escape due to incorrect boundary conditions in the Graphics in CanvasWebGL component CVE-2026-0879: Sandbox escape due t...

6.1CVSS5.6AI score0.0057EPSS
SaveExploits0References28
OSV
OSV
added 2026/01/19 11:14 a.m.4 views

SUSE-SU-2026:0153-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: MFSA 2026-05 bsc1256340: - CVE-2026-0877: Mitigation bypass in the DOM in Security component - CVE-2026-0878: Sandbox escape due to incorrect boundary conditions in the Graphics in CanvasWebGL component - CVE-2026-0879: Sandbox escape...

9.8CVSS5.8AI score0.0057EPSS
SaveExploits0References15
CNVD
CNVD
added 2026/01/19 12:0 a.m.6 views

Mozilla Firefox and Mozilla Firefox ESR code execution vulnerability (CNVD-2026-11799)

Mozilla Firefox is an open source web browser from the Mozilla Foundation, USA.Mozilla Firefox ESR is an extended support version of Firefox web browser from the Mozilla Foundation, USA. A code execution vulnerability exists in Mozilla Firefox and Mozilla Firefox ESR due to a use-after-release in...

9.8CVSS6.6AI score0.00423EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2026/01/18 12:0 a.m.6 views

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:20054-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20054-1 advisory. Changes in chromium: - Chromium 144.0.7559.59 boo1256614 CVE-2026-0899: Out of bounds memory access in V8 CVE-2026-0900: Inappropriate...

9.8CVSS5.4AI score0.07689EPSS
SaveExploits0References21
Microsoft CVE
Microsoft CVE
added 2026/01/17 4:8 a.m.14 views

Chromium: CVE-2026-0902 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS6.4AI score0.00258EPSS
SaveExploits0
OSV
OSV
added 2026/01/16 12:9 p.m.4 views

OPENSUSE-SU-2026:20046-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: - Mozilla Thunderbird 140.6.0 ESR MFSA 2025-96 bsc1254551 CVE-2025-14321 bmo1992760 Use-after-free in the WebRTC: Signaling component CVE-2025-14322 bmo1996473 Sandbox escape due to incorrect boundary...

9.8CVSS5.8AI score0.00583EPSS
SaveExploits2References11
OSV
OSV
added 2026/01/16 11:59 a.m.7 views

OESA-2026-1090 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...

9.8CVSS7.5AI score0.00583EPSS
SaveExploits2References24
OSV
OSV
added 2026/01/16 11:58 a.m.8 views

OESA-2026-1088 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...

9.8CVSS7.5AI score0.00583EPSS
SaveExploits2References24
OSV
OSV
added 2026/01/16 11:58 a.m.10 views

OESA-2026-1086 firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability. %if 0 %global mozdebugprefix /lib/debug %global mozdebugdir /lib/debug/ %global unamem %uname -m %global symbolsfilename -.en-US.-%uname.crashreporter-symbols.zip %global symbolsfilepath...

9.8CVSS7.5AI score0.00583EPSS
SaveExploits2References24
Rockylinux
Rockylinux
added 2026/01/16 9:6 a.m.15 views

firefox security update

An update is available for firefox. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

9.8CVSS7.3AI score0.0057EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/01/16 12:0 a.m.10 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code and cause service interruptions.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause a service denial by using a specially created HTML...

10CVSS8AI score0.00382EPSS
SaveExploits0References11Affected Software4
CNNVD
CNNVD
added 2026/01/16 12:0 a.m.10 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that originates from an improper implementation in V8, which can be exploited by an attacker to bypass security restrictions...

8.8CVSS7.3AI score0.00323EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2026/01/16 12:0 a.m.6 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to gain access to read, modify, and delete data.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to gain access to, read, modify, and delete data through a specially creat...

10CVSS7AI score0.00323EPSS
SaveExploits0References11Affected Software4
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.8 views

RockyLinux 8 : firefox (RLSA-2026:0667)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:0667 advisory. firefox: Spoofing issue in the Downloads Panel component CVE-2025-14327 firefox: Use-after-free in the JavaScript: GC component CVE-2026-0885 firefox:...

9.8CVSS5.7AI score0.0057EPSS
SaveExploits0References27
Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.6 views

Microsoft Edge (Chromium) < 144.0.3719.82 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 144.0.3719.82. It is, therefore, affected by multiple vulnerabilities as referenced in the January 16, 2026 advisory. - Use after free in ANGLE. CVE-2026-0908 - Microsoft Edge Elevation Service exposes a privileged COM...

9.8CVSS7.2AI score0.07689EPSS
SaveExploits0References23
Hacker One
Hacker One
added 2026/01/15 10:0 p.m.14 views

Node.js: HashDoS in V8

Vulnerability description not provided...

5.9CVSS6.5AI score0.00283EPSS
SaveExploits0
Rows per page
Query Builder