CVE-2025-10200

Use after free in Serviceworker in Google Chrome on Desktop prior to 140.0.7339.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

Malicious code in snap-score-points636 (npm)

The package snap-score-points636 was found to contain malicious code...

Malicious code in snap-score-meaning552 (npm)

The package snap-score-meaning552 was found to contain malicious code...

Malicious code in snap-score-points232 (npm)

The package snap-score-points232 was found to contain malicious code...

Malicious code in snap-score-increase013 (npm)

The package snap-score-increase013 was found to contain malicious code...

MAL-2025-46097 Malicious code in snap-score-points232 (npm)

The package snap-score-points232 was found to contain malicious code...

MAL-2025-46094 Malicious code in snap-score-increase013 (npm)

The package snap-score-increase013 was found to contain malicious code...

Malicious code in snap-score-increase387 (npm)

The package snap-score-increase387 was found to contain malicious code...

MAL-2025-46095 Malicious code in snap-score-increase387 (npm)

The package snap-score-increase387 was found to contain malicious code...

MAL-2025-46096 Malicious code in snap-score-meaning552 (npm)

The package snap-score-meaning552 was found to contain malicious code...

MAL-2025-46098 Malicious code in snap-score-points636 (npm)

The package snap-score-points636 was found to contain malicious code...

CVE-2025-7445

Kubernetes secrets-store-sync-controller in versions before 0.0.2 discloses service account tokens in logs...

CVE-2025-9864

Rejected reason: This CVE ID was assigned in error to a vulnerability that was both introduced and fixed before the code landed in the Stable channel of Chrome, and has been withdrawn...

CVE-2025-9866

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-9865

Inappropriate implementation in Toolbar in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-9867

Inappropriate implementation in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2025-5187

A vulnerability exists in the NodeRestriction admission controller in Kubernetes clusters where node users can delete their corresponding node object by patching themselves with an OwnerReference to a cluster-scoped resource. If the OwnerReference resource does not exist or is subsequently delete...

CVE-2025-57797

Incorrect privilege assignment vulnerability exists in ScanSnap Manager installers versions prior to V6.5L61. If this vulnerability is exploited, an authenticated local attacker may escalate privileges and execute an arbitrary command...

JVN#69684540: ScanSnap Manager installers vulnerable to privilege escalation

ScanSnap Manager installers provided by PFU Limited contain the following vulnerability. Incorrect privilege assignment CWE-266 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 8.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 7.8 CVE-2025-57797 Impact An...

CVE-2025-4609

Incorrect handle provided in unspecified circumstances in Mojo in Google Chrome on Windows prior to 136.0.7103.113 allowed a remote attacker to potentially perform a sandbox escape via a malicious file. Chromium security severity: High...