33 matches found
CVE-2025-4664
🔒 Vulnerability CVE-2025-4664 The CVE-2025-4664 vulnerability is a high-severity security flaw identified in the Loader component of Google Chrome, present in versions prior to 136.0.7103.113. This issue allows a remote attacker to leak cross-origin data via a specially crafted HTML page,...
CVE-2026-87508
A flaw was found in the Loader component of Google Chrome. This incorrect authorization vulnerability allows a remote attacker to bypass the web origin policy by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive information or actions acro...
CVE-2026-87571
Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
DEBIAN-CVE-2026-87476
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87476
An incorrect authorization flaw was found in the Loader component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=506390077...
CVE-2026-87508
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87508
CVE-2026-87508 is an incorrect authorization flaw in the Loader component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can leverage a crafted HTML page to bypass the web origin policy , resulting in limited confidentiality impact. The vulnerability requires use...
CVE-2026-78942
A flaw was found in the Loader component of Google Chrome. This vulnerability, caused by incorrect reference resolution, allows a remote attacker to bypass the web origin policy by sending specially crafted network traffic. Bypassing the web origin policy can lead to unauthorized access to...
CVE-2026-79051
A flaw was found in Google Chrome. Incorrect authorization within the Loader component allows a remote attacker to bypass the web origin policy. This can be exploited by enticing a user to visit a specially crafted HTML page...
CVE-2026-79051
CVE-2026-79051 is an incorrect authorization vulnerability in the Loader component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , resulting in a web origin policy bypass . The CVSS 3.1 base score is 4.3 (Medium) , with ...
CVE-2026-17783
An inappropriate implementation flaw was found in the Loader component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513532735...
CVE-2026-17661
An use after free flaw was found in the Loader component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497451790...
CVE-2026-17664
An insufficient validation of untrusted input flaw was found in the Loader component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500554346...
CVE-2026-11240
An insufficient validation of untrusted input flaw was found in the Loader component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497030032...
Google Chrome 输入验证错误漏洞
Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a vulnerability related to input validation, which stems from insufficient trustworthiness in input validation provided by the Loader component...
ROS-20260122-73-0021
A vulnerability in the Loader component of Google Chrome browser is related to incorrect data type conversion. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service using a specially crafted HTML page...
PT-2026-21332
Name of the Vulnerable Software and Affected Versions GIMP versions prior to 3.0.8-5 Description A heap-buffer-overflow exists when processing specially crafted PSD Photoshop Document files. The issue occurs within the fread pascal string function because the buffer allocated for a Pascal string ...
Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of Secrets
The second wave of the Shai-Hulud supply chain attack has spilled over to the Maven ecosystem after compromising more than 830 packages in the npm registry. The Socket Research Team said it identified a Maven Central package named org.mvnpm:posthog-node:4.18.1 that embeds the same two components...
ROS-20251008-03
A vulnerability in the Loader component of Google Chrome browsers is related to bypassing the authentication procedure by using an alternate path or channel. Exploitation of the vulnerability could allow an attacker acting remotely to bypass security restrictions...
