Lucene search
+L

427 matches found

Tenable Nessus
Tenable Nessus
•added 2026/05/14 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-8545

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Object corruption in Compositing in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to leak cross-origi...

3.1CVSS5.9AI score0.00207EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•20 views

PT-2026-41074

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description Object corruption in Compositing allows a remote attacker who has compromised the renderer process to leak cross-origin data through a crafted HTML page. Recommendations Update to...

9.6CVSS6.6AI score0.00573EPSS
SaveExploits1References396
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•24 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a security vulnerability. This vulnerability stemmed from corrupted Compositing component objects, which could allow remote attackers with compromised rendering processes to exploit...

3.1CVSS5.6AI score0.00207EPSS
SaveExploits0References3
Kaspersky
Kaspersky
•added 2026/05/06 12:00 a.m.•37 views

KLA91053 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Codecs can be exploited remotely to execute arbitrary code. ...

9.6CVSS7.9AI score0.00484EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2026/05/01 7:15 a.m.•12 views

Chromium: CVE-2026-7360 Insufficient validation of untrusted input in Compositing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

3.1CVSS6AI score0.00239EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/04/30 12:00 a.m.•16 views

The vulnerability of Google Chrome’s Compositing component allows attackers to gain access to protected information.

The vulnerability of Google Chrome’s Compositing component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to protected information...

7.8CVSS6.1AI score0.00239EPSS
SaveExploits0References8Affected Software4
RedhatCVE
RedhatCVE
•added 2026/04/29 1:23 a.m.•26 views

CVE-2026-7360

An insufficient validation of untrusted input flaw was found in the Compositing component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=495852034...

8.7CVSS5.9AI score0.00239EPSS
SaveExploits0References5
NVD
NVD
•added 2026/04/28 11:16 p.m.•12 views

CVE-2026-7360

Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

3.1CVSS0.00239EPSS
SaveExploits0References2
OSV
OSV
•added 2026/04/28 11:16 p.m.•13 views

DEBIAN-CVE-2026-7360

Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

3.1CVSS6.1AI score0.00239EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/04/28 11:16 p.m.•12 views

CVE-2026-7360

Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

3.1CVSS6.1AI score0.00239EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/04/28 10:35 p.m.•66 views

CVE-2026-7360

Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

0.00239EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/04/28 10:35 p.m.•11 views

EUVD-2026-26186

Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

6.1AI score0.00239EPSS
SaveExploits0References2
CVE
CVE
•added 2026/04/28 10:35 p.m.•71 views

CVE-2026-7360

Google Chrome versions prior to 147.0.7727.138 are vulnerable to a high-severity security flaw caused by insufficient validation of untrusted input within the Compositing component. A remote attacker who has successfully compromised the renderer process can exploit this vulnerability by serving a...

3.1CVSS6.1AI score0.00239EPSS
SaveExploits0References2Affected Software1
AlpineLinux
AlpineLinux
•added 2026/04/28 10:35 p.m.•23 views

CVE-2026-7360

Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

3.1CVSS6.1AI score0.00239EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/04/28 10:35 p.m.•7 views

CVE-2026-7360

Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

6.1AI score0.00239EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•1 views

CVE-2026-7360: Improper Input Validation

Insufficient validation of untrusted input. in Compositing in Google Chrome prior to 147.0.7727.138 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

3.1CVSS6.1AI score0.00239EPSS
SaveExploits0References3
Fedora
Fedora
•added 2026/04/13 9:07 p.m.•17 views

[SECURITY] Fedora 44 Update: gegl04-0.4.70-2.fc44

GEGL Generic Graphics Library is a graph based image processing framework. GEGLs original design was made to scratch GIMP's itches for a new compositing and processing core. This core is being designed to have minimal dependencies and a simple well defined API...

9.8CVSS5.9AI score0.0098EPSS
SaveExploits3
CNVD
CNVD
•added 2026/04/10 12:00 a.m.•41 views

Google Chrome Compositing Component Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions of Google Chrome prior to 146.0.7680.178. The vulnerability stems from a mix-up in the instructions responsible for freeing memory in the Compositing component. An attacker can...

9.6CVSS8.1AI score0.00306EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/04/10 12:00 a.m.•20 views

PT-2026-46652

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description A use after free issue in Compositing allows a remote attacker to execute arbitrary code inside a sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that...

10CVSS7.9AI score0.0028EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/04/08 12:00 a.m.•15 views

The vulnerability of the Compositing component in the Google Chrome browser allows attackers to execute arbitrary code or trigger a service denial.

The vulnerability of the Compositing component in the Google Chrome browser is related to the use of memory after deallocation. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause a service failure...

10CVSS8.7AI score0.00306EPSS
SaveExploits0References9Affected Software5
Rows per page
Query Builder