1064 matches found
EUVD-2024-32413
Malicious code in bioql PyPI...
PT-2025-44683
Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in Google Chrome that could allow attackers to compromise the system. The issue involves a policy bypass within Chrome Extensions. This impacts Microsoft Edge, which is...
The vulnerability of the Extensions component of Google Chrome and Microsoft Edge browsers allows attackers to bypass security restrictions.
The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to a flaw in data protection mechanisms. Exploiting this vulnerability allows an attacker to bypass security restrictions remotely...
PT-2026-24867
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.71 Description A use-after-free issue exists in the Extensions component of Google Chrome. This allows an attacker who convinces a user to install a malicious extension to potentially exploit heap...
SUSE CVE-2025-9866
Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-9866
Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...
DEBIAN-CVE-2025-9866
Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Medium...
Linux Distros Unpatched Vulnerability : CVE-2017-15394
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient Policy Enforcement in Extensions in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform domain spoofing in permission dialogs...
Linux Distros Unpatched Vulnerability : CVE-2018-6176
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process t...
DEBIAN-CVE-2025-8581
Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2025-8576
Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2025-8576
Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2025-8576
Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2025-8576
Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2025-8576
Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: Medium...
The vulnerability of the Extensions component of the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Google Chrome browser’s Extensions component is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability allows an attacker who operates remotely to gain unauthorized access to protected information...
SUSE CVE-2025-8576
Use after free in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to potentially exploit heap corruption via a crafted Chrome Extension. Chromium security severity: Medium...
SUSE CVE-2025-8581
Inappropriate implementation in Extensions in Google Chrome prior to 139.0.7258.66 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
PT-2026-24876
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.71 Description A flaw exists in Google Chrome where insufficient policy enforcement in extensions could allow an attacker to perform UI spoofing. Specifically, if a user is tricked into installing a...
PT-2025-44690
Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description A flaw exists in Google Chrome that could allow attackers to impact the system. This issue involves a policy bypass within Extensions. Microsoft Edge, being Chromium-based, is also...