Lucene search
K

17 matches found

Microsoft CVE
Microsoft CVE
added 2026/05/11 2:0 p.m.3 views

Chromium: CVE-2026-7905 Insufficient validation of untrusted input in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.3CVSS5.8AI score0.00099EPSS
Exploits0
OSV
OSV
added 2026/04/25 11:48 p.m.2 views

GHSA-C4QG-J8JG-42Q5 OpenClaw: QQBot direct media upload skipped URL SSRF validation

Affected Packages / Versions - Package: openclaw npm - Affected versions: 2026.4.20 - Patched version: 2026.4.20 Impact The QQBot direct-upload media path could forward attacker-controlled image URLs without applying the SSRF validation used by the local download path. This could make configured...

6.3CVSS5.9AI score0.00041EPSS
Exploits0References5
Microsoft CVE
Microsoft CVE
added 2026/04/11 12:31 a.m.1 views

Chromium: CVE-2026-5907 Insufficient data validation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.1CVSS5.8AI score0.00094EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2026/04/09 11:29 p.m.1 views

SUSE CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

8.1CVSS7.3AI score0.00094EPSS
Exploits0References3
EUVD
EUVD
added 2026/04/09 12:32 a.m.1 views

EUVD-2026-20734

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

8.1CVSS5.9AI score0.00094EPSS
Exploits0References3
NVD
NVD
added 2026/04/08 10:16 p.m.1 views

CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

8.1CVSS0.00094EPSS
Exploits0References2
OSV
OSV
added 2026/04/08 10:16 p.m.2 views

DEBIAN-CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

8.1CVSS8.4AI score0.00094EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2026/04/08 10:16 p.m.1 views

CVE-2026-5907

Insufficient data validation in Media in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory read via a crafted video file. Chromium security severity: Low...

8.1CVSS5.8AI score0.00094EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/04/07 12:0 a.m.3 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 147.0.7727.55 contained a security vulnerability due to insufficient Media data validation. This vulnerability could allow remote attackers to perform out-of-bound memory reads through specially crafted vid...

8.1CVSS7.3AI score0.00094EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/15 12:0 a.m.2 views

PT-2026-31525

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 147.0.7727.55 Description Insufficient data validation in the Media component of Google Chrome could allow a remote attacker to perform an out-of-bounds memory read using a crafted video file. Exploitation may...

9.6CVSS5.8AI score0.00161EPSS
Exploits0References65
OSV
OSV
added 2025/12/25 5:16 a.m.2 views

CVE-2025-66379

Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted media stream, resulting in a denial of service...

7.5CVSS5.8AI score
Exploits0References1
Cvelist
Cvelist
added 2025/12/25 12:0 a.m.18 views

CVE-2025-66379

Pexip Infinity before 39.0 has Improper Input Validation in the media implementation, allowing a remote attacker to trigger a software abort via a crafted media stream, resulting in a denial of service...

7.5CVSS0.00063EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/27 2:23 p.m.15 views

CVE-2024-56571

...

Exploits0
SUSE CVE
SUSE CVE
added 2023/02/15 3:56 a.m.2 views

SUSE CVE-2020-15964

Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.02266EPSS
Exploits1References8
RedHat Linux
RedHat Linux
added 2020/10/07 11:27 a.m.2 views

chromium-browser: Insufficient data validation in media

Insufficient data validation in media in Google Chrome prior to 85.0.4183.121 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.4AI score0.02266EPSS
Exploits1References5
CNVD
CNVD
added 2020/09/22 12:0 a.m.4 views

Google Chrome Insufficient Data Validation Vulnerability (CNVD-2020-53300)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A data validation insufficiency vulnerability exists in media in versions of Google Chrome prior to 85.0.4183.121. A remote attacker can exploit this vulnerability...

8.8CVSS8.9AI score0.02266EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2010/03/12 12:0 a.m.9 views

Mandriva Update for mmc-wizard MDVA-2010:095 (mmc-wizard)

Check for the Version of mmc-wizard OpenVAS Vulnerability Test Mandriva Update for mmc-wizard MDVA-2010:095 mmc-wizard Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

7.4AI score
Exploits0References2
Rows per page
Query Builder