47905 matches found
CVE-2026-13907
Inappropriate implementation in iOSWeb in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13904
Inappropriate implementation in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13878
Use after free in Bluetooth in Google Chrome on Mac prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13862
Insufficient policy enforcement in Web Authentication Passkeys & Security Keys in Google Chrome on iOS prior to 150.0.7871.47 allowed an attacker in a privileged network position to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13847
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...
CVE-2026-13843
Insufficient validation of untrusted input in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...
CVE-2026-13812
Google Chrome on iOS versions prior to 150.0.7871.47 are vulnerable to a UXSS flaw caused by insufficient validation of untrusted input. A remote attacker can exploit this by convincing a user to perform specific UI gestures on a crafted HTML page, leading to the injection of arbitrary scripts or...
CVE-2026-13807
Use after free in Import in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a malicious file. Chromium security severity: High...
CVE-2026-13795
Insufficient policy enforcement in Chrome for iOS in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: High...
CVE-2026-43707
creationtimestamp| type| source ---|---|--- 2026-06-30 10:00:53+00:00| seen| https://thehackernews.com/2026/06/apple-patches-30-ios-macos-safari-flaws.html 2026-07-01 01:00:45+00:00| seen| https://thehackernews.com/2026/06/apple-patches-30-ios-macos-safari-flaws.html 2026-07-01 02:51:35+00:00|...
Apple Safari resource management error vulnerability (CNVD-2026-28249)
Apple Safari is a web browser developed by Apple Inc., primarily designed for browsing web pages and accessing internet content. Apple Safari has a resource management vulnerability, which stems from an issue where memory is not properly managed when processing malicious web content. Attackers ca...
Apple Safari buffer overflow vulnerability (CNVD-2026-26436)
Apple Safari is a web browser developed by Apple Inc., primarily used on iOS, iPadOS, and macOS systems. Apple Safari has a buffer overflow vulnerability, which stems from an inability to properly validate boundaries. Attackers can exploit this vulnerability by processing maliciously crafted web...
Apple Safari resource management error vulnerability (CNVD-2026-28251)
Apple Safari is a web browser used primarily for accessing and browsing web content. Apple Safari has a resource management vulnerability, which stems from memory error references during processing of maliciously crafted web content. Attackers can exploit this vulnerability to cause memory...
PT-2026-54166
Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description Side-channel information leakage in WebAuthentication allows a remote attacker to leak cross-origin data through the use of a crafted HTML page. Side-channel information leakage...
Apple Safari path traversal vulnerability (CNVD-2026-26335)
Apple Safari is a web browser developed by Apple Inc., integrated into iOS, iPadOS, and macOS systems. It supports web browsing and rendering functions. Apple Safari has a path traversal vulnerability, which stems from an inability to correctly verify file paths. Attackers can exploit this...
PT-2026-54304
Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 150.0.7871.47 Description Incorrect security UI allows a remote attacker to perform UI spoofing via a crafted HTML page if a user is convinced to engage in specific UI gestures. Recommendations Update...
Apple Safari permissions vulnerability (CNVD-2026-26338)
Apple Safari is a web browser developed by Apple Inc., integrated into iOS, iPadOS, and macOS systems. It is primarily used for accessing and browsing web content. Apple Safari has a permissions vulnerability. This vulnerability stems from improper handling of permissions restrictions during...
Apple Safari buffer overflow vulnerability (CNVD-2026-26364)
Safari is a web browser developed by Apple Inc., whose main function is to browse web content. Apple Safari has security vulnerabilities; these vulnerabilities arise due to improper handling of maliciously constructed web content. Attackers can exploit these vulnerabilities to cause memory...
Apple Safari buffer overflow vulnerability (CNVD-2026-26434)
Apple Safari is a web browser developed by Apple Inc., primarily used on iOS, iPadOS, and macOS systems. It provides web browsing functionality. Apple Safari has a buffer overflow vulnerability. This vulnerability stems from insufficient validation of boundary checks. Attackers can exploit this...
Apple Safari resource management error vulnerability (CNVD-2026-28248)
Apple Safari is a web browser developed by Apple Inc., integrated into iOS, iPadOS, and macOS systems. It is primarily used for browsing web pages and processing web content. There is a resource management vulnerability in Apple Safari. The cause of this vulnerability is the improper handling of...