Lucene search
+L

11713 matches found

EUVD
EUVD
•added 2026/05/29 12:38 a.m.•23 views

EUVD-2026-33183

Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

7.1AI score0.00304EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/05/29 12:13 a.m.•30 views

CVE-2026-9888

An use after free flaw was found in the WebView component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511715166...

9CVSS6AI score0.00304EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2026/05/29 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-9888

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially...

8.3CVSS6.9AI score0.00304EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/28 11:16 p.m.•26 views

CVE-2026-9888

Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS0.00304EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/05/28 11:16 p.m.•24 views

DEBIAN-CVE-2026-9888

Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS7.1AI score0.00304EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/28 10:25 p.m.•124 views

CVE-2026-9888

A use after free vulnerability exists in the WebView component of Google Chrome on Android (versions prior to 148.0.7778.216). The flaw allows a remote attacker who has already compromised the renderer process to perform a sandbox escape by serving a crafted HTML page. The issue was addressed in ...

8.3CVSS7.1AI score0.00304EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/05/28 10:25 p.m.•37 views

CVE-2026-9888

Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS7.1AI score0.00304EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/05/28 10:25 p.m.•14 views

CVE-2026-9888

Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

7.1AI score0.00304EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/28 10:25 p.m.•63 views

CVE-2026-9888

Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

0.00304EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/28 4:20 p.m.•61 views

CVE-2026-45261

GitButler desktop app (Tauri-based) is affected prior to version 0.19.7. The issue is a link-injection/remote script execution vector where an attacker can inject a malicious link into a pull request body; if a user clicks it, arbitrary script execution occurs in the Tauri webview. The vulnerabil...

9.3CVSS6.3AI score0.00492EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/05/28 4:20 p.m.•32 views

EUVD-2026-32944

GitButler is a modern Git-based version control interface for AI-powered workflows. Prior to 0.19.7, a emote code execution vulnerability exists in the Tauri-based GitButler desktop application. An attacker can inject a malicious link in a pull request body, which if clicked by the user allows fo...

9.3CVSS6.3AI score0.00492EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/05/28 4:20 p.m.•26 views

CVE-2026-45261 GitButler: Link injection via forge integration enables arbitrary script execution

GitButler is a modern Git-based version control interface for AI-powered workflows. Prior to 0.19.7, a emote code execution vulnerability exists in the Tauri-based GitButler desktop application. An attacker can inject a malicious link in a pull request body, which if clicked by the user allows fo...

9.3CVSS6.4AI score
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•11 views

CVE-2026-45261: Improper Control of Generation of Code

GitButler is a modern Git-based version control interface for AI-powered workflows. Prior to 0.19.7, a emote code execution vulnerability exists in the Tauri-based GitButler desktop application. An attacker can inject a malicious link in a pull request body, which if clicked by the user allows fo...

9.3CVSS6.3AI score0.00492EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/28 12:00 a.m.•27 views

GitButler code injection vulnerability

GitButler is an open-source modern Git version control interface that supports AI workflows. Versions of GitButler prior to 0.19.7 contained a code injection vulnerability. This vulnerability could allow arbitrary scripts to execute in the Tauri webview due to the malicious links present in the...

9.3CVSS6.5AI score0.00492EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/28 12:00 a.m.•3 views

CVE-2026-9888: Use After Free

Use after free in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS7.1AI score0.00304EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/28 12:00 a.m.•22 views

PT-2026-44597

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 148.0.7778.216 Description A use after free issue exists in WebView. This allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape by using a...

9.6CVSS7.4AI score0.00573EPSS
SaveExploits0References387
CNNVD
CNNVD
•added 2026/05/27 12:00 a.m.•27 views

Google Chrome on Android: Resource management error vulnerability

Google Chrome on Android is a web browser in the Android operating system developed by Google Inc. Versions of Google Chrome on Android prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the WebView component’s ability to reuse resources after...

8.3CVSS6.8AI score0.00304EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2026/05/27 12:00 a.m.•109 views

KLA91074 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in GPU can be exploited remotely to cause denial of service. ...

8.8CVSS8AI score0.00319EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/19 2:58 a.m.•18 views

CVE-2026-24792 web_webview has a Race Condition vulnerability

in OpenHarmony v6.0 and prior versions allow a remote attacker arbitrary code execution in pre-installed apps...

8.1CVSS6.4AI score0.00428EPSS
SaveExploits0References1
CVE
CVE
•added 2026/05/19 2:58 a.m.•66 views

CVE-2026-24792

OpenHarmony vulnerability CVE-2026-24792 affects OpenHarmony v6.0 and earlier, involving a race condition in web_webview that allows a remote attacker to achieve arbitrary code execution in pre-installed apps. The description does not specify the exact root cause details, affected files/functions...

8.1CVSS6.4AI score0.00428EPSS
SaveExploits0References1
Rows per page
Query Builder