Lucene search
+L

805 matches found

CNVD
CNVD
added 2025/07/02 12:0 a.m.12 views

Google Chrome V8 Type Obfuscation Vulnerability (CNVD-2025-14800)

Google Chrome is a web browser from Google, an American company. A type confusion vulnerability exists in Google Chrome V8. The vulnerability is caused due to the V8 engine improperly handling bounds checking and type conversion for certain data types when executing JavaScript code, resulting in...

8.1CVSS9.3AI score0.12723EPSS
SaveExploits5References1
The Hacker News
The Hacker News
added 2025/07/01 8:55 a.m.27 views

Chrome Zero-Day CVE-2025-6554 Under Active Attack — Google Issues Security Update

Google has released security updates to address a vulnerability in its Chrome browser for which an exploit exists in the wild. The zero-day vulnerability, tracked as CVE-2025-6554 CVSS score: 8.1, has been described as a type confusion flaw in the V8 JavaScript and WebAssembly engine. "Type...

8.8CVSS7.7AI score0.12723EPSS
SaveExploits15
OSV
OSV
added 2025/06/30 10:15 p.m.2 views

DEBIAN-CVE-2025-6554

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.1CVSS7.7AI score0.12723EPSS
SaveExploits5References1
AlpineLinux
AlpineLinux
added 2025/06/30 9:14 p.m.19 views

CVE-2025-6554

Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.1CVSS6.7AI score0.12723EPSS
SaveExploits5
CNNVD
CNNVD
added 2025/06/30 12:0 a.m.4 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A type confusion vulnerability exists in Google Chrome V8. The vulnerability is caused due to the V8 engine improperly handling bounds checking and type conversion for certain data types when executing JavaScript code, resulting in...

8.1CVSS7.5AI score0.12723EPSS
SaveExploits5References3
AlpineLinux
AlpineLinux
added 2025/06/18 6:16 p.m.6 views

CVE-2025-6191

Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

8.8CVSS7AI score0.09817EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2025/06/17 12:0 a.m.10 views

PT-2025-29591

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 138.0.7204.157 Description An integer overflow in V8, the JavaScript engine used in Google Chrome, could allow a remote attacker to exploit heap corruption via a crafted HTML page. The Chromium security severity...

10CVSS8.8AI score0.09263EPSS
SaveExploits0References41
AstraLinux
AstraLinux
added 2025/06/16 11:28 a.m.6 views

Astra Linux – Vulnerability in Chromium

In V8, reading outside the bounds of permission in Google Chrome before version 134.0.6998.35 allowed a remote attacker to perform out-of-bound memory access through a crafted HTML page. Chromium security severity: High...

8.8CVSS7.2AI score0.00378EPSS
SaveExploits0References3
NCSC
NCSC
added 2025/06/10 6:44 p.m.7 views

Vulnerabilities fixed in Google Chrome and Microsoft Edge

Google has fixed vulnerabilities in Google Chrome versions before 137.0.7151.68. The vulnerabilities are in Google Chrome's V8 engine and Blink. The first vulnerability involves out of bounds read and write problems that can lead to heap corruption. This can be exploited by a malicious party by...

8.8CVSS6.8AI score0.07627EPSS
SaveExploits3References3
Malwarebytes
Malwarebytes
added 2025/06/04 3:18 p.m.20 views

Google fixes another actively exploited vulnerability in Chrome, so update now!

Google has released an update for the Chrome browser to patch an actively exploited flaw. The update brings the Stable channel to versions 137.0.7151.68/.69 for Windows and Mac and 137.0.7151.68 for Linux. The easiest way to update Chrome is to allow it to update automatically, but you can end up...

8.8CVSS8.8AI score0.07627EPSS
SaveExploits3
CNVD
CNVD
added 2025/06/03 12:0 a.m.6 views

Google Chrome Out-of-Bounds Read/Write Vulnerability

Google Chrome is a web browser developed by Google Inc. Google Chrome suffers from an out-of-bounds read/write vulnerability that stems from an out-of-bounds read/write issue in the V8 engine, which can be exploited by an attacker to trigger the vulnerability via a malicious web page, bypassing t...

8.8CVSS7.9AI score0.07627EPSS
SaveExploits3
SUSE CVE
SUSE CVE
added 2025/05/29 2:12 a.m.5 views

SUSE CVE-2025-5280

Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.2AI score0.02415EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/05/27 8:43 p.m.10 views

CVE-2025-5280

Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

6.7AI score0.02415EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/03/15 3:59 a.m.13 views

CVE-2025-2135

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.3AI score0.06814EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.9 views

The vulnerability of the JavaScript script handler interface of Google Chrome’s V8 engine allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the JavaScript script handler interface of Google Chrome’s V8 engine is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

10CVSS8AI score0.00378EPSS
SaveExploits0References10Affected Software5
SUSE CVE
SUSE CVE
added 2025/03/12 5:9 a.m.3 views

SUSE CVE-2025-2135

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.1AI score0.06814EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2025/03/12 12:0 a.m.11 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

10CVSS8.1AI score0.00321EPSS
SaveExploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2025/03/12 12:0 a.m.10 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

10CVSS8AI score0.06814EPSS
SaveExploits1References10Affected Software4
ATTACKERKB
ATTACKERKB
added 2025/03/10 9:15 p.m.4 views

CVE-2025-2135

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.3AI score0.06814EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2025/03/10 8:39 p.m.33 views

CVE-2025-1920

Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

0.00321EPSS
SaveExploits0References2
Rows per page
Query Builder