Lucene search
+L

4145 matches found

Positive Technologies
Positive Technologies
added 2025/01/15 12:00 a.m.10 views

PT-2025-12837

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 134.0.6998.177. Description A zero-day vulnerability, tracked as CVE-2025-2783, has been discovered in Google Chrome's Mojo IPC component, allowing remote attackers to escape the browser's sandbox on Windows...

10CVSS8.4AI score0.22561EPSS
SaveExploits18References415
CNNVD
CNNVD
added 2025/01/15 12:00 a.m.14 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in versions of Google Chrome prior to 132.0.6834.83, which can be exploited by an attacker to execute arbitrary code on a system...

8.8CVSS7.9AI score0.0041EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.23 views

PT-2025-1280 · Microsoft +5 · Edge +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Microsoft Edge versions affected versions not specified Description: The issue is related to a race condition in the Frames component of Google Chrome and Microsoft Edge, allowing a remote attacke...

9.6CVSS6.4AI score0.20713EPSS
SaveExploits28References265
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.20 views

PT-2025-1267 · Microsoft +5 · Edge +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Microsoft Edge affected versions not specified Description: The issue is related to an out of bounds read in the Metrics component, which could allow a remote attacker to potentially exploit heap...

10CVSS6.6AI score0.20713EPSS
SaveExploits28References265
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.11 views

PT-2025-1282 · Microsoft +5 · Edge +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Microsoft Edge affected versions not specified Description: The issue exists due to an inappropriate implementation of Fenced Frames in the browser, allowing a remote attacker to obtain potentiall...

9.6CVSS6.1AI score0.20713EPSS
SaveExploits28References264
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.8 views

PT-2025-1264 · Microsoft +3 · Edge +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Navigation function of Google Chrome and Microsoft Edge, allowing a remot...

9.6CVSS6.6AI score0.20713EPSS
SaveExploits28References261
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.15 views

PT-2025-1287 · Microsoft +5 · Edge +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Extensions component of Google Chrome and Microsoft Edge, allowing a remo...

9.6CVSS6.3AI score0.20713EPSS
SaveExploits28References263
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.23 views

PT-2025-1283 · Microsoft +5 · Edge +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Payments component of Google Chrome and Microsoft Edge, allowing a remote...

9.6CVSS6.5AI score0.20713EPSS
SaveExploits28References263
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.27 views

PT-2025-1266 · Google +4 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Description: The issue is related to an integer overflow in the Skia library of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. T...

10CVSS6.9AI score0.20713EPSS
SaveExploits28References269
Positive Technologies
Positive Technologies
added 2025/01/14 12:00 a.m.11 views

PT-2025-1268 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Description: The issue is related to a stack buffer overflow in the Tracing component of Google Chrome, which could allow a remote attacker to exploit stack corruption via a crafted HTML page. Thi...

10CVSS8.6AI score0.20713EPSS
SaveExploits28References266
Zero Day Initiative
Zero Day Initiative
added 2025/01/12 12:00 a.m.20 views

(Pwn2Own) Google Chrome VideoFrame Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Google Chrome. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation o...

5.4CVSS6.9AI score0.01762EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/01/09 12:00 a.m.12 views

The vulnerability of the JavaScript script handler in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge relates to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

10CVSS8.2AI score0.07935EPSS
SaveExploits1References15Affected Software6
Tenable Nessus
Tenable Nessus
added 2025/01/07 12:00 a.m.18 views

Google Chrome < 131.0.6778.264 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 131.0.6778.264. It is, therefore, affected by a vulnerability as referenced in the 202501stable-channel-update-for-desktop advisory. - Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote...

8.8CVSS8.6AI score0.07935EPSS
SaveExploits1References3
Tenable Nessus
Tenable Nessus
added 2025/01/07 12:00 a.m.12 views

Google Chrome < 131.0.6778.264 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 131.0.6778.264. It is, therefore, affected by a vulnerability as referenced in the 202501stable-channel-update-for-desktop advisory. - Type Confusion in V8 in Google Chrome prior to 131.0.6778.264 allowed a remote attacke...

8.8CVSS8.6AI score0.07935EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.5 views

PT-2025-40434

Name of the Vulnerable Software and Affected Versions Chromium affected versions not specified Description An issue exists in Chromium related to an inappropriate implementation in Media. This could allow attackers to affect the system. Microsoft Edge Chromium-based is also impacted as it ingests...

8.8CVSS5.9AI score0.00361EPSS
SaveExploits0References43
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.7 views

PT-2025-16900 · Chromium +4 · Chromium +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.95 Description: A use after free issue in the USB component of Google Chrome allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue is related to the...

10CVSS8.6AI score0.00514EPSS
SaveExploits0References52
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-25775

Name of the Vulnerable Software and Affected Versions Debian Linux affected versions not specified Description The issue is related to an integer overflow. It was reported by Shaheen Fazim. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

10CVSS8.4AI score0.09817EPSS
SaveExploits0References40
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-41495

Name of the Vulnerable Software and Affected Versions Chromium versions prior to 141.0.7390.65 Microsoft Edge versions prior to 141.0.7390.65 Description A use-after-free issue exists in the Storage component of Google Chrome and Microsoft Edge browsers. Exploitation of this issue could allow a...

10CVSS9AI score0.00322EPSS
SaveExploits1References24
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.8 views

PT-2025-19755 · Chromium +3 · Chromium +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 136.0.7103.59 chromium in Debian Linux affected versions not specified Description: The issue is related to an out of bounds memory access in DevTools. A remote attacker could potentially exploit heap corruptio...

9.8CVSS6.9AI score0.00575EPSS
SaveExploits0References40
Positive Technologies
Positive Technologies
added 2025/01/01 12:00 a.m.5 views

PT-2025-19757 · Chromium +3 · Chromium +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 136.0.7103.59 chromium in Debian Linux affected versions not specified Description: The issue is related to an inappropriate implementation in DevTools, allowing a remote attacker to bypass discretionary access...

9.8CVSS8.3AI score0.00575EPSS
SaveExploits0References47
Rows per page
Query Builder