Lucene search
+L

189869 matches found

osv_debian
osv_debian
•added 2026/10/20 10:18 p.m.•15 views

DEBIAN-CVE-2026-113045

Out of bounds read in Offline in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.2AI score0.00341EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/10/20 10:18 p.m.•15 views

DEBIAN-CVE-2026-113038

Race condition in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.8AI score0.00265EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/10/20 10:18 p.m.•14 views

DEBIAN-CVE-2026-113035

Missing authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS7AI score0.00362EPSS
SaveExploits1References1
NVD
NVD
•added 2026/10/20 10:18 p.m.•9 views

CVE-2026-113035

Missing authorization in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00362EPSS
SaveExploits1References2
NVD
NVD
•added 2026/10/20 10:18 p.m.•10 views

CVE-2026-113026

Information loss in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00422EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/20 10:18 p.m.•16 views

DEBIAN-CVE-2026-113026

Information loss in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score0.00422EPSS
SaveExploits0References1
osv_debian
osv_debian
•added 2026/10/20 10:18 p.m.•14 views

DEBIAN-CVE-2026-113010

Incomplete cleanup in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.7AI score0.00356EPSS
SaveExploits1References1
NVD
NVD
•added 2026/10/20 10:18 p.m.•9 views

CVE-2026-113010

Incomplete cleanup in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00356EPSS
SaveExploits1References2
osv_debian
osv_debian
•added 2026/10/20 10:18 p.m.•17 views

DEBIAN-CVE-2026-113006

Incorrect authorization in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.9AI score0.00338EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/20 10:18 p.m.•12 views

CVE-2026-113006

Incorrect authorization in Navigation in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass system access restrictions into a privileged page via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS0.00338EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/10/20 10:18 p.m.•28 views

DEBIAN-CVE-2026-113002

Incorrect authorization in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score0.00317EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/20 10:18 p.m.•9 views

CVE-2026-113002

Incorrect authorization in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00317EPSS
SaveExploits0References2
NVD
NVD
•added 2026/10/20 10:18 p.m.•11 views

CVE-2026-101844

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite component: Concurrent Requests. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

3.1CVSS0.0023EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/20 10:18 p.m.•7 views

CVE-2026-101814

Vulnerability in the Oracle Engineering product of Oracle E-Business Suite component: Change Management. Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Engineering...

5.3CVSS0.00299EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/20 10:18 p.m.•12 views

CVE-2026-101805

Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite component: Diagnostics. Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Applications...

3.3CVSS0.00256EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/20 10:18 p.m.•12 views

CVE-2026-101790

Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications component: Security. Supported versions that are affected are 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0 and 15.2.0.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to...

3.3CVSS0.00126EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/20 10:18 p.m.•12 views

CVE-2026-101777

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL component: Server: Security: Encryption. Supported versions that are affected are MySQL Server: 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privilege...

5.5CVSS0.00369EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/20 10:18 p.m.•17 views

CVE-2026-101745

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

5.3CVSS0.00333EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/20 10:18 p.m.•12 views

CVE-2026-101740

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where...

3.6CVSS0.0012EPSS
SaveExploits0References1
NVD
NVD
•added 2026/10/20 10:18 p.m.•12 views

CVE-2026-101734

Vulnerability in the Oracle Agile Engineering Data Management product of Oracle Supply Chain component: Engineering Communication Interface. The supported version that is affected is 6.2.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

4.3CVSS0.00301EPSS
SaveExploits0References1
Rows per page
Query Builder