CVE-2026-7351

Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: High...

CVE-2026-7351

Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: High...

CVE-2026-7351

Google Chrome versions prior to 147.0.7727.138 are vulnerable to a race condition in the MHTML component . This vulnerability allows an attacker to trick a user into installing a malicious extension, which can then be used to leak cross-origin data via a crafted Chrome Extension. This issue is ad...

CVE-2026-7351

Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: High...

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 147.0.7727.138 contained a vulnerability related to competition conditions in the MHTML component. This vulnerability could allow attackers to trick users into installing malicious extensions, thereby...

KLA91010 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Canvas can be exploited remotely to execute arbitrar...

CVE-2026-7351: Concurrent Execution using Shared Resource with Improper Synchronization

Race in MHTML in Google Chrome prior to 147.0.7727.138 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: High...

PT-2026-38215

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description An inappropriate implementation in MHTML MIME HTML, a web page archive format allows a remote attacker to leak cross-origin data. This occurs when a user is convinced to perform specifi...

PT-2026-35851

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.138 Description A race condition in MHTML MIME HTML, a web page archive format allows an attacker to leak cross-origin data. This occurs if an attacker convinces a user to install a crafted malicious...

PT-2026-36221

Уязвимость компонента MHTML браузера Google Chrome связана с ошибками синхронизации при использовании общего ресурса. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, раскрыть конфиденциальную информацию...

PT-2026-38205

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description An inappropriate implementation in MHTML MIME HTML, a web page archive format allows a remote attacker who has already compromised the renderer process to inject arbitrary scripts or...

Google Chrome < 4.9.385.33 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 4.9.385.33. It is, therefore, affected by multiple vulnerabilities as referenced in the 201603stable-channel-update24 advisory. - The PageCaptureSaveAsMHTMLFunction::ReturnFailure function in...

EUVD-2012-5645

Malware in sbrugna...

EUVD-2017-9006

Malware in sbrugna...

EUVD-2014-0998

Malware in sbrugna...

EUVD-2016-2745

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2017-5124

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect application of sandboxing in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to inject arbitrary scripts or HTML UXSS via a...

WPS Office Spreadsheet Module Arbitrary Command Execution

The vulnerability of the MHTML export function in the Spreadsheet module of the WPS Office office software on Windows operating systems is related to the loading of malicious DLL libraries due to an incorrect limitation on the path to the ksoqing directory. Exploiting this vulnerability allows a...

Void Banshee APT Exploits Microsoft MHTML Flaw to Spread Atlantida Stealer

An advanced persistent threat APT group called Void Banshee has been observed exploiting a recently disclosed security flaw in the Microsoft MHTML browser engine as a zero-day to deliver an information stealer called Atlantida. Cybersecurity firm Trend Micro, which observed the activity in mid-Ma...

CVE-2023-26292

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Forcepoint Cloud Security Gateway CSG Portal on Web Cloud Security Gateway, Email Security Cloud loginsubmit.mhtml modules, Forcepoint Web Security Portal on Hybrid loginsubmit.mhtml modules allows...