4249 matches found
CVE-2025-45984
CVE-2025-45984 affects multiple Blink router models (BL-WR9000 2.4.9; BL-AC1900 1.0.2; BL-AC2100 AZ3 1.0.4; BL-X10 AC8 1.0.5; BL-LTE300 1.2.3; BL-F1200 AT1 1.0.0; BL-X26 AC8 1.2.8; BLAC450M AE4 4.0.0; BL-X26 DA3 1.2.7). A command injection vulnerability exists via the routepwd parameter in the su...
CVE-2025-45987
Blink routers BL-WR9000 V2.4.9 , BL-AC2100AZ3 V1.0.4, BL-X10AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200AT1 v1.0.0, BL-X26AC8 v1.2.8, BLAC450MAE4 v4.0.0 and BL-X26DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the dns1 and dns2 parameters in the bsSetDNSInfo...
CVE-2025-45988
The CVE-2025-45988 entry affects Blink routers (BL-WR9000, BL-AC2100 AZ3, BL-X10 AC8, BL-LTE300, BL-F1200 AT1, BL-X26 AC8, BLAC450M AE4, BL-X26 DA3) with multiple command injection vulnerabilities in the bs_SetCmd function via the cmd parameter. Root cause: improper handling of the cmd parameter ...
Vulnerabilities fixed in Google Chrome and Microsoft Edge
Google has fixed vulnerabilities in Google Chrome versions before 137.0.7151.68. The vulnerabilities are in Google Chrome's V8 engine and Blink. The first vulnerability involves out of bounds read and write problems that can lead to heap corruption. This can be exploited by a malicious party by...
Google Chrome memory misreference vulnerability (CNVD-2025-12379)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a memory misreference vulnerability that is due to free usage in Blink. An attacker can exploit the vulnerability to execute arbitrary code on the system...
SUSE CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
Chromium: CVE-2025-5068 Use after free in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
DEBIAN-CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-5068
CVE-2025-5068 is a use-after-free in Blink affecting Google Chrome prior to 137.0.7151.68. The underlying issue is a heap corruption risk in Blink triggered by crafted HTML pages, with the CVSS vector indicating NETWORK attack vector, low attack complexity, and user interaction required, yielding...
CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-5068
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
[SECURITY] Fedora 42 Update: chromium-137.0.7151.55-1.fc42
Chromium is an open-source web browser, powered by WebKit Blink...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a memory misreference vulnerability that is due to free usage in Blink. An attacker can exploit the vulnerability to execute arbitrary code on the system...
CVE-2023-5476
Use after free in Blink History in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2010-5155
Race condition in Blink Professional 4.6.1 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during hook-handler...
CVE-2019-3986
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the encryption parameter...
CVE-2019-3987
Blink XT2 Sync Module firmware prior to 2.13.11 allows remote attackers to execute arbitrary commands on the device due to improperly sanitized input when configuring the devices wifi configuration via the key parameter...