Lucene search
K

19 matches found

RedhatCVE
RedhatCVE
added 4 days ago5 views

CVE-2026-45244

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS5.5AI score0.00027EPSS
Exploits1References1
OSV
OSV
added 2026/05/18 9:31 p.m.4 views

GHSA-67GQ-6Q8C-QQH6 Summarize contains a missing authorization vulnerability

Summarize prior to 0.15.0 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS5.9AI score0.00027EPSS
Exploits1References7
Github Security Blog
Github Security Blog
added 2026/05/18 9:31 p.m.6 views

Summarize contains a missing authorization vulnerability

Summarize prior to 0.15.0 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS5.9AI score0.00027EPSS
Exploits1References7Affected Software1
NVD
NVD
added 2026/05/18 8:16 p.m.7 views

CVE-2026-45244

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS0.00027EPSS
Exploits1References4
CVE
CVE
added 2026/05/18 6:57 p.m.11 views

CVE-2026-45244

CVE-2026-45244 affects the Summarize extension prior to version 0.15.1 . The vulnerability is a missing authorization flaw that lets attackers execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent via ...

5.4CVSS5.9AI score0.00027EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2026/05/18 6:57 p.m.21 views

CVE-2026-45244 Summarize < 0.15.1 Unapproved Browser Automation Execution

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS0.00027EPSS
Exploits1References4
EUVD
EUVD
added 2026/05/18 6:57 p.m.14 views

EUVD-2026-30796

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS5.9AI score0.00027EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2026/05/18 6:57 p.m.6 views

CVE-2026-45244

Summarize prior to 0.15.1 contains a missing authorization vulnerability that allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. Attackers can influence the agent through malicious page or summary content to invo...

5.4CVSS5.9AI score0.00027EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2026/05/18 12:0 a.m.13 views

PT-2026-41723

Name of the Vulnerable Software and Affected Versions Summarize versions prior to 0.15.1 Description A missing authorization issue allows attackers to execute browser automation actions without per-call user approval when the extension automation feature is enabled. By using malicious page or...

5.4CVSS5.9AI score0.00027EPSS
Exploits1References7
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.20 views

Apple iPhone <= 2.2.1 Call Approval Dialog Security Bypass Vulnerability (2)

No description provided by source. source: http://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.22 views

Apple iPhone <= 2.2.1 Call Approval Dialog Security Bypass Vulnerability (3)

No description provided by source. source: http://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and...

7.1AI score
Exploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.13 views

Apple iPhone <= 2.2.1 Call Approval Dialog Security Bypass Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and...

7.1AI score
Exploits0
Cvelist
Cvelist
added 2009/06/19 4:0 p.m.21 views

CVE-2009-0961

The Mail component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 dismisses the call approval dialog when another alert appears, which might allow remote attackers to force the iPhone to place a call without user approval by causing an application to trigger a...

6.3AI score0.04228EPSS
Exploits0References6
CVE
CVE
added 2009/06/19 4:0 p.m.50 views

CVE-2009-0961

The CVE-2009-0961 issue affects Apple iPhone OS 1.0–2.2.1 and iPhone OS for iPod touch 1.1–2.2.1. The Mail component could dismiss the call-approval dialog when another alert appears, potentially allowing a remote attacker to place a call without user approval by triggering an alert. The connecte...

5CVSS6.4AI score0.04228EPSS
Exploits0References6Affected Software1
Exploit DB
Exploit DB
added 2009/05/17 12:0 a.m.20 views

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (2)

source: https://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and place a call automatically from a...

7AI score
Exploits0
exploitpack
exploitpack
added 2009/05/17 12:0 a.m.12 views

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (1)

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass 1 source: https://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2009/05/17 12:0 a.m.23 views

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (3)

source: https://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's call-approval dialog and place a call automatically from a...

7.4AI score
Exploits0
exploitpack
exploitpack
added 2009/05/17 12:0 a.m.11 views

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (2)

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass 2 source: https://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's...

Exploits0
exploitpack
exploitpack
added 2009/05/17 12:0 a.m.10 views

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass (3)

Apple iPhone 2.2.1 - Call Approval Dialog Security Bypass 3 source: https://www.securityfocus.com/bid/35425/info Apple iPhone is prone to a security-bypass vulnerability that may cause a call to be placed automatically. Successfully exploiting this issue may allow attackers to bypass the Mail's...

7.4AI score
Exploits0
Rows per page
Query Builder