Lucene search
+L

53 matches found

AstraLinux
AstraLinux
•added 2026/10/05 11:39 a.m.•16 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

8.1CVSS7.4AI score0.00288EPSS
SaveExploits0References2
AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•15 views

Astra Linux – Vulnerability in Chromium

Memory access out of bounds in WebHID in Google Chrome prior to version 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption through a malicious HID device. Chromium security severity: High...

9.8CVSS8.6AI score0.01062EPSS
SaveExploits0References2
Redos
Redos
•added 2026/09/11 12:00 a.m.•9 views

ROS-20260911-73-0090

The vulnerability of the WebHID component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

8.1CVSS7.7AI score0.00288EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/09/02 12:00 a.m.•14 views

WebHID Component DoS

The vulnerability of the WebHID component in Google Chrome and Microsoft Edge is related to lack of access control. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

8.1CVSS7.7AI score0.00288EPSS
SaveExploits0References9Affected Software5
RedhatCVE
RedhatCVE
•added 2026/07/28 12:51 p.m.•12 views

CVE-2026-13864

An insufficient policy enforcement flaw was found in the WebHID component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496399913...

8.1CVSS7.3AI score0.00288EPSS
SaveExploits0References5
Redos
Redos
•added 2026/07/20 12:00 a.m.•19 views

ROS-20260720-73-0004

The vulnerability of the WebHID Human Interface Device interface of the Google Chrome browser is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code by connecting to HID...

9.8CVSS8.8AI score0.01062EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/07/07 2:36 a.m.•20 views

SUSE CVE-2026-13864

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

8.1CVSS7.4AI score0.00288EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2026/07/03 2:00 p.m.•26 views

Chromium: CVE-2026-13864 Insufficient policy enforcement in WebHID

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.1CVSS7.4AI score0.00288EPSS
SaveExploits0
EUVD
EUVD
•added 2026/07/01 12:34 a.m.•20 views

EUVD-2026-40550

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

7.4AI score0.00288EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/01 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-13864

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to...

8.1CVSS7.3AI score0.00288EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/06/30 11:17 p.m.•21 views

CVE-2026-13864

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

8.1CVSS7.4AI score0.00288EPSS
SaveExploits0References3
NVD
NVD
•added 2026/06/30 11:17 p.m.•21 views

CVE-2026-13864

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

8.1CVSS0.00288EPSS
SaveExploits0References2
osv-debian
osv-debian
•added 2026/06/30 11:17 p.m.•18 views

DEBIAN-CVE-2026-13864

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

8.1CVSS7.4AI score0.00288EPSS
SaveExploits0References1
CVE
CVE
•added 2026/06/30 10:38 p.m.•140 views

CVE-2026-13864

Google Chrome (and Microsoft Edge ) are vulnerable to privilege escalation due to insufficient policy enforcement in the WebHID component. An attacker who convinces a user to install a malicious extension can exploit this flaw via a crafted Chrome Extension to gain elevated privileges. The vulner...

8.1CVSS7.4AI score0.00288EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/06/30 10:38 p.m.•19 views

CVE-2026-13864

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

7.4AI score0.00288EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
•added 2026/06/30 10:38 p.m.•12 views

CVE-2026-13864

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

7.4AI score0.00288EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/06/30 10:38 p.m.•56 views

CVE-2026-13864

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

0.00288EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/06/30 10:38 p.m.•27 views

CVE-2026-13864

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

8.1CVSS7.4AI score0.00288EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•3 views

CVE-2026-13864: Improper Access Control

Insufficient policy enforcement in WebHID in Google Chrome prior to 150.0.7871.47 allowed an attacker who convinced a user to install a malicious extension to perform privilege escalation via a crafted Chrome Extension. Chromium security severity: Medium...

8.1CVSS7.4AI score0.00288EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/03/26 12:00 a.m.•20 views

PT-2026-54141

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.47 Description Insufficient policy enforcement in WebHID allows an attacker to perform privilege escalation. This occurs when a user is convinced to install a crafted malicious Chrome Extension...

8.1CVSS6.5AI score0.00288EPSS
SaveExploits0
Rows per page
Query Builder