Lucene search
+L

1439 matches found

CVE
CVE
•added 2026/09/29 7:45 p.m.•3 views

CVE-2026-102330

Incorrect authorization in SiteIsolation in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

SaveExploits0References2
CVE
CVE
•added 2026/09/29 7:45 p.m.•6 views

CVE-2026-102329

Cross-site scripting in WebUI in Google Chrome prior to 154.0.8037.92 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: High...

SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 6:32 p.m.•1 views

EUVD-2026-89253

Incorrect authorization in BrowserTag in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

5.9AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/09/29 6:32 p.m.•3 views

EUVD-2026-89134

Incorrect authorization in Network in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

5.8AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/09/29 6:32 p.m.•2 views

EUVD-2026-89248

Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

5.9AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/09/29 6:32 p.m.•1 views

EUVD-2026-89255

Cross-site request forgery in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

5.8AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/09/29 6:32 p.m.•3 views

EUVD-2026-89161

Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

5.8AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/09/29 6:32 p.m.•1 views

EUVD-2026-89153

Incorrect authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Low...

5.8AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/09/29 6:32 p.m.•2 views

EUVD-2026-89133

Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted HTML page. Chromium security severity: Medium...

5.8AI score
SaveExploits0References3
EUVD
EUVD
•added 2026/09/29 6:32 p.m.•2 views

EUVD-2026-89147

Missing authorization in WebView in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

5.9AI score
SaveExploits0References3
NVD
NVD
•added 2026/09/29 6:17 p.m.•5 views

CVE-2026-95366

Use of released resource in Core in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

SaveExploits0References2
NVD
NVD
•added 2026/09/29 6:17 p.m.•5 views

CVE-2026-95361

Confused deputy in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

SaveExploits0References2
NVD
NVD
•added 2026/09/29 6:17 p.m.•2 views

CVE-2026-95342

Missing authorization in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

SaveExploits0References2
CVE
CVE
•added 2026/09/29 5:32 p.m.•18 views

CVE-2026-95342

A missing authorization vulnerability in the V8 engine of Google Chrome (prior to version 154.0.8037.57) allows a remote attacker to bypass the web origin policy through a crafted HTML page. This issue has been addressed in recent security updates, such as the stable channel update for desktop an...

5.8AI score
SaveExploits0References2
CVE
CVE
•added 2026/09/29 5:31 p.m.•13 views

CVE-2026-95285

Google Chrome on Android prior to version 154.0.8037.57 is vulnerable to a missing authorization flaw in the WebView component. A remote attacker who has compromised the renderer process can bypass the web origin policy by serving a crafted HTML page. This vulnerability is categorized with a Low ...

5.9AI score
SaveExploits0References2
CVE
CVE
•added 2026/09/29 5:31 p.m.•22 views

CVE-2026-95275

Google Chrome versions prior to 154.0.8037.57 are vulnerable to an incorrect reference resolution in MediaStream . This flaw allows a remote attacker to bypass the web origin policy and access a privileged page via a crafted HTML page. This vulnerability has been addressed in version 154.0.8037.5...

5.8AI score
SaveExploits0References2
CVE
CVE
•added 2026/09/29 5:31 p.m.•14 views

CVE-2026-95297

Google Chrome versions prior to 154.0.8037.57 are vulnerable to missing authorization in Contextual Tasks. This flaw allows a remote attacker to bypass the web origin policy by navigating to a crafted HTML page. The vulnerability is rated with a Medium security severity. Remediation is available ...

5.8AI score
SaveExploits0References2
CVE
CVE
•added 2026/09/29 5:31 p.m.•15 views

CVE-2026-95375

A vulnerability in Google Chrome prior to version 154.0.8037.57 was identified due to incorrect authorization in BrowserTag . This flaw allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. The vulnerability is assigned a Medi...

5.9AI score
SaveExploits0References2
CVE
CVE
•added 2026/09/29 5:31 p.m.•24 views

CVE-2026-95366

Google Chrome versions prior to 154.0.8037.57 are vulnerable to a Use of released resource in the Core component. This flaw allows a remote attacker who has already compromised the renderer process to bypass the web origin policy by serving a crafted HTML page. The Chromium security severity is r...

5.9AI score
SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 12:36 p.m.•3 views

EUVD-2026-88788

Same-origin policy bypass in the DevTools component. This vulnerability was fixed in Firefox ESR 153.4 and Firefox 157...

6AI score
SaveExploits0References3
Rows per page
Query Builder