Lucene search
+L

98 matches found

Tenable Nessus
Tenable Nessus
•added 2026/10/07 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-106338

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/10/06 7:18 p.m.•10 views

CVE-2026-106338

UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2026/10/06 6:41 p.m.•14 views

CVE-2026-106338

UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•6 views

CVE-2026-106338: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in PictureInPicture in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to spoof address bar via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.8AI score0.00198EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/09/30 2:57 p.m.•16 views

SUSE CVE-2026-102324

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS7.4AI score0.00269EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/30 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-102324

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially...

8.3CVSS7.3AI score0.00269EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/09/29 8:55 p.m.•12 views

CVE-2026-102324

An use after free flaw was found in the PictureInPicture component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=562174487 https://code.google.com/p/chromium/issues/detail?id=102324...

8.8CVSS6AI score0.00269EPSS
SaveExploits0References5
NVD
NVD
•added 2026/09/29 8:17 p.m.•13 views

CVE-2026-102324

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS0.00269EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/09/29 8:17 p.m.•9 views

DEBIAN-CVE-2026-102324

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS7.4AI score0.00269EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/29 7:45 p.m.•12 views

CVE-2026-102324

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

7.4AI score0.00269EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/29 7:45 p.m.•56 views

CVE-2026-102324

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

0.00269EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/29 7:45 p.m.•14 views

EUVD-2026-89393

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS7.4AI score0.00269EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/29 7:45 p.m.•20 views

CVE-2026-102324

Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS7.4AI score0.00269EPSS
SaveExploits0
CVE
CVE
•added 2026/09/29 7:45 p.m.•159 views

CVE-2026-102324

Google Chrome versions prior to 154.0.8037.92 are vulnerable to a Use after free flaw in the PictureInPicture component. A remote attacker who has already compromised the renderer process can exploit this vulnerability via a crafted HTML page to potentially execute arbitrary code outside the sand...

8.3CVSS7.4AI score0.00269EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2026/09/29 6:17 p.m.•10 views

CVE-2026-95340

Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

4.3CVSS0.00257EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/09/29 6:17 p.m.•15 views

DEBIAN-CVE-2026-95340

Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.7AI score0.00257EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/29 6:17 p.m.•16 views

CVE-2026-95340

Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.9AI score0.00257EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/29 5:32 p.m.•58 views

CVE-2026-95340

Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

0.00257EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/29 5:32 p.m.•10 views

CVE-2026-95340

Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

5.7AI score0.00257EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/09/29 5:32 p.m.•20 views

CVE-2026-95340

Incorrect authorization in PictureInPicture in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.7AI score0.00257EPSS
SaveExploits0
Rows per page
Query Builder