Lucene search
+L

87 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/20 12:00 a.m.•7 views

Google Chrome Vulnerability: CVE-2026-113056

Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Low...

9.6CVSS7.2AI score0.00466EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/20 12:00 a.m.•7 views

Google Chrome Vulnerability: CVE-2026-113146

Memory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.3AI score0.00406EPSS
SaveExploits1References3
Redos
Redos
•added 2026/09/15 12:00 a.m.•19 views

ROS-20260915-73-0103

The vulnerability of the PerformanceAPIs component in Google Chrome and Microsoft Edge relates to improper protection against attacks through external physical channels. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML...

6.5CVSS6.8AI score0.00237EPSS
SaveExploits0
Redos
Redos
•added 2026/09/10 12:00 a.m.•12 views

ROS-20260910-73-0130

The vulnerability of the PerformanceAPIs component in Google Chrome and Microsoft Edge relates to the manipulation of cross-site requests. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

4.3CVSS5.6AI score0.00213EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/09/02 12:00 a.m.•19 views

PerformanceAPIs Component Sensitive Data Access

The vulnerability in the PerformanceAPIs component of Google Chrome and Microsoft Edge web browsers is related to cross-site request forgery. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

5CVSS5.6AI score0.00213EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
•added 2026/08/31 12:00 a.m.•20 views

PerformanceAPIs Component Confidential Data Access

The vulnerability of the PerformanceAPIs component in Google Chrome and Microsoft Edge relates to improper protection against attacks through external physical channels. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML...

7.8CVSS6.8AI score0.00237EPSS
SaveExploits0References11Affected Software5
Microsoft CVE
Microsoft CVE
•added 2026/08/28 2:00 p.m.•21 views

Chromium: CVE-2026-78955 Observable discrepancy in PerformanceAPIs

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS6.6AI score0.00318EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/08/27 12:19 a.m.•16 views

SUSE CVE-2026-78955

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.7AI score0.00318EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/08/26 4:25 p.m.•18 views

CVE-2026-78955

A flaw was found in Google Chrome. An observable discrepancy in the PerformanceAPIs allows a remote attacker to potentially obtain sensitive cross-origin data. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page, leading to unauthorized information...

6.5CVSS6.5AI score0.00318EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/08/26 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-78955

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafte...

6.5CVSS6.6AI score0.00318EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/08/25 9:17 p.m.•14 views

DEBIAN-CVE-2026-78955

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.7AI score0.00318EPSS
SaveExploits0References1
NVD
NVD
•added 2026/08/25 9:17 p.m.•16 views

CVE-2026-78955

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00318EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/08/25 9:17 p.m.•20 views

CVE-2026-78955

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.7AI score0.00318EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/08/25 8:10 p.m.•14 views

EUVD-2026-65921

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.7AI score0.00318EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/08/25 8:10 p.m.•25 views

CVE-2026-78955

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.7AI score0.00318EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/08/25 8:10 p.m.•15 views

CVE-2026-78955

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.7AI score0.00318EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/25 8:10 p.m.•65 views

CVE-2026-78955

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

0.00318EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/25 8:10 p.m.•259 views

CVE-2026-78955

A vulnerability in Google Chrome (specifically the chromium package) allows a remote attacker to potentially obtain cross-origin data via a crafted HTML page. The root cause is an observable discrepancy in PerformanceAPIs affecting versions prior to 152.0.7977.65 . Impact of this flaw is categori...

6.5CVSS6.7AI score0.00318EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•6 views

CVE-2026-78955: Observable Discrepancy

Observable discrepancy in PerformanceAPIs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.8AI score0.00318EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•23 views

PT-2026-81566

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An observable discrepancy in PerformanceAPIs allows a remote attacker to potentially obtain cross-origin data through the use of a crafted HTML page. Cross-origin data refers to...

9.6CVSS6.6AI score0.0056EPSS
SaveExploits1References335
Rows per page
Query Builder