Lucene search
K

28 matches found

OSV
OSV
added 2026/06/04 11:17 p.m.5 views

DEBIAN-CVE-2026-11042

Use after free in Views in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.5AI score0.00301EPSS
Exploits0References1
NVD
NVD
added 2026/06/04 11:17 p.m.6 views

CVE-2026-11028

Use after free in Media in Google Chrome on Linux and ChromeOS prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS0.00361EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/06/04 11:4 p.m.26 views

CVE-2026-11106

Inappropriate implementation in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

0.00187EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/06/02 12:0 a.m.3 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a resource management vulnerability. This vulnerability stemmed from the reuse of Audio components after their release, which could allow remote attackers to exploit the vulnerabilit...

8.3CVSS5.4AI score0.00267EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/29 12:38 a.m.7 views

EUVD-2026-33168

Use after free in Network in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Critical...

6.2AI score0.00301EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/27 12:0 a.m.7 views

PT-2026-44660

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.216 Description A use after free issue exists in WebAudio, which allows a remote attacker to execute arbitrary code within a sandbox by utilizing a specially crafted HTML page. Use after free is a...

9.6CVSS6.2AI score0.00383EPSS
Exploits0References156
Vulnrichment
Vulnrichment
added 2026/04/15 7:4 p.m.3 views

CVE-2026-6313

Insufficient policy enforcement in CORS in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00207EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2026/04/08 9:20 p.m.2 views

CVE-2026-5888

Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score0.00258EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/04/01 12:0 a.m.4 views

Linux Distros Unpatched Vulnerability : CVE-2026-5286

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Dawn in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security...

8.8CVSS6.3AI score0.00313EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/31 12:0 a.m.2 views

PT-2026-29463

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.178 Description A use-after-free issue existed in the WebGL component of Google Chrome. This allowed a remote attacker to potentially execute arbitrary code within a sandbox through a specially crafte...

9.6CVSS6.3AI score0.05036EPSS
Exploits0References32
NVD
NVD
added 2026/03/11 10:16 p.m.3 views

CVE-2026-3935

Incorrect security UI in WebAppInstalls in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00161EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.6 views

PT-2026-5021

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 144.0.7559.110 Description An issue in the Background Fetch API in Google Chrome allowed a remote attacker to leak cross-origin data through a specially crafted HTML page. The security severity is rated as High...

7.8CVSS5.9AI score0.00224EPSS
Exploits1References32
Tenable Nessus
Tenable Nessus
added 2025/08/19 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2018-6057

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Lack of special casing of Android ashmem in Google Chrome prior to 65.0.3325.146 allowed a remote attacker who had compromised the renderer process to bypass...

8.8CVSS8.1AI score0.01483EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2025/03/13 12:0 a.m.4 views

The vulnerability of the Profiles component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Profiles component in Google Chrome browser relates to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code using a specially created HTML page...

10CVSS7.5AI score0.00273EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/10/14 12:0 a.m.1 views

The vulnerability of Google Chrome’s Autofill function allows attackers to influence the integrity of the protected information.

The vulnerability of Google Chrome’s Autofill function is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows an attacker to influence the integrity of protected information by loading a specially created HTML page...

5CVSS5.4AI score0.00683EPSS
Exploits0References13Affected Software5
SUSE CVE
SUSE CVE
added 2023/02/15 4:2 a.m.2 views

SUSE CVE-2020-6576

Use after free in offscreen canvas in Google Chrome prior to 85.0.4183.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.9AI score0.01636EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:34 a.m.2 views

SUSE CVE-2022-0804

Inappropriate implementation in Full screen mode in Google Chrome on Android prior to 99.0.4844.51 allowed a remote attacker to hide the contents of the Omnibox URL bar via a crafted HTML page...

6.5CVSS6.7AI score0.00863EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2022/08/19 12:0 a.m.5 views

The vulnerability of the Extensions API for Microsoft Edge and Google Chrome browsers allows a perpetrator to disclose protected information.

The vulnerability of the Extensions API for Microsoft Edge and Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information through a specially created web page...

9.4CVSS6.7AI score0.0057EPSS
Exploits0References10Affected Software6
OSV
OSV
added 2022/07/26 10:15 p.m.0 views

UBUNTU-CVE-2022-1498

Inappropriate implementation in HTML Parser in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS7.3AI score0.00683EPSS
Exploits1References2
BDU FSTEC
BDU FSTEC
added 2022/02/16 12:0 a.m.3 views

The vulnerability of Google Chrome’s Payments component, which allows a hacker to access confidential information

The vulnerability of Google Chrome’s Payments component is related to the use of memory after deallocation. Exploiting this vulnerability can allow an attacker to gain access to confidential information through a specially created web page...

7.1CVSS7AI score0.007EPSS
Exploits0References10Affected Software6
Rows per page
Query Builder