Lucene search
+L

2488 matches found

NVD
NVD
added 2026/01/27 9:16 p.m.9 views

CVE-2026-1504

Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

6.5CVSS0.00224EPSS
SaveExploits1References2
OSV
OSV
added 2026/01/27 9:16 p.m.11 views

CVE-2026-1504

Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/01/27 9:16 p.m.10 views

DEBIAN-CVE-2026-1504

Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

6.5CVSS8.7AI score0.00224EPSS
SaveExploits1References1
CVE
CVE
added 2026/01/27 8:46 p.m.122 views

CVE-2026-1504

CVE-2026-1504 concerns the Background Fetch API in Chromium/Google Chrome, where an inappropriate implementation allowed a remote attacker to leak cross-origin data via a crafted HTML page. Affected software is Chromium/Chrome prior to 144.0.7559.110 (per the initial description). The root cause ...

6.5CVSS5.9AI score0.00224EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2026/01/27 8:46 p.m.25 views

CVE-2026-1504

Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

0.00224EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2026/01/27 8:46 p.m.11 views

CVE-2026-1504

Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

6.5CVSS8.6AI score0.00224EPSS
SaveExploits1
EUVD
EUVD
added 2026/01/27 8:46 p.m.7 views

EUVD-2026-4737

Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.9AI score0.00224EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/01/27 8:46 p.m.10 views

CVE-2026-1504

Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

5.9AI score0.00224EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/01/27 8:46 p.m.6 views

CVE-2026-1504

Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.9AI score0.00224EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2026/01/27 8:46 p.m.9 views

CVE-2026-1504

Inappropriate implementation in Background Fetch API in Google Chrome prior to 144.0.7559.110 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

6.5CVSS8.7AI score0.00224EPSS
SaveExploits1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/01/27 6:26 p.m.17 views

Malicious code in tabletas (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 27d102f1cf4d0e6b08e5e77aa57a2a436a49f782fe6571b2a8e8d114e10d968d Packages contain hidden code that is effectively run during importing or using the library, and downloads second stage code. Then, a process running in...

6.1AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2026/01/27 12:0 a.m.6 views

Google Chrome < 144.0.7559.109 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 144.0.7559.109. It is, therefore, affected by a vulnerability as referenced in the 202601stable-channel-update-for-desktop27 advisory. - Inappropriate implementation in Background Fetch API in Google Chrome prior to...

6.5CVSS8.8AI score0.00224EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2026/01/27 12:0 a.m.13 views

Google Chrome < 144.0.7559.109 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 144.0.7559.109. It is, therefore, affected by a vulnerability as referenced in the 202601stable-channel-update-for-desktop27 advisory. - Inappropriate implementation in Background Fetch API in Google Chrome prior to...

6.5CVSS8.8AI score0.00224EPSS
SaveExploits1References3
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2026/01/27 12:0 a.m.21 views

Stable Channel Update for Desktop

The Stable channel has been updated to 144.0.7559.109/.110 for Windows/Mac and 144.0.7559.109 for Linux, which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

6.5CVSS5.9AI score0.00224EPSS
SaveExploits1Affected Software1
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.10 views

PT-2026-5021

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 144.0.7559.110 Description An issue in the Background Fetch API in Google Chrome allowed a remote attacker to leak cross-origin data through a specially crafted HTML page. The security severity is rated as High...

7.8CVSS5.9AI score0.00224EPSS
SaveExploits1References32
FreeBSD
FreeBSD
added 2026/01/27 12:0 a.m.8 views

chromium -- security fix

Chrome Releases reports: This update includes 1 security fix: 474435504 High CVE-2026-1504: Inappropriate implementation in Background Fetch API. Reported by Luan Herrera @lbherrera on 2026-01-09...

6.5CVSS5.9AI score0.00224EPSS
SaveExploits1References1
RedHat Linux
RedHat Linux
added 2026/01/26 4:34 p.m.21 views

libpng: LIBPNG buffer overflow

A buffer overflow flaw has been discovered in libpng. An out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALPHA enabled. The palette compositing code in pnginitreadtransformations incorrectly applies background compositing during...

7.1CVSS6AI score0.00407EPSS
SaveExploits4References8
RedHat Linux
RedHat Linux
added 2026/01/26 4:9 p.m.13 views

libpng: LIBPNG buffer overflow

A buffer overflow flaw has been discovered in libpng. An out-of-bounds read vulnerability exists in pngimagereadcomposite when processing palette images with PNGFLAGOPTIMIZEALPHA enabled. The palette compositing code in pnginitreadtransformations incorrectly applies background compositing during...

7.1CVSS6AI score0.00407EPSS
SaveExploits4References8
RedhatCVE
RedhatCVE
added 2026/01/25 9:10 p.m.19 views

CVE-2026-0593

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the processBackgroundAction function in all versions up to, and including, 10.0.04. This makes it possible for authenticated attackers, with...

5.3CVSS5.5AI score0.00234EPSS
SaveExploits0References1
NVD
NVD
added 2026/01/24 5:15 p.m.11 views

CVE-2026-0593

The WP Go Maps formerly WP Google Maps plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the processBackgroundAction function in all versions up to, and including, 10.0.04. This makes it possible for authenticated attackers, with...

5.3CVSS0.00234EPSS
SaveExploits0References2
Rows per page
Query Builder