51 matches found
CVE-2026-87530
A flaw was found in the CredentialProvider component of Google Chrome on Windows. This vulnerability, an uncontrolled search path element, allows a local attacker to execute arbitrary code. By exploiting this flaw via a local program, an attacker can bypass the browser's sandbox and run malicious...
DEBIAN-CVE-2026-87530
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
CVE-2026-87530
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
EUVD-2026-74395
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
CVE-2026-87530
Google Chrome on Windows is affected by an uncontrolled search path element in the CredentialProvider component, allowing a local attacker to execute arbitrary code outside the sandbox via a local program. The vulnerability affects versions prior to 153.0.8010.36 , where the fix was released. The...
CVE-2026-87530
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
CVE-2026-87530
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
PT-2026-88630
Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 153.0.8010.36 allowed a local attacker to execute arbitrary code outside the sandbox via a local program. Chromium security severity: Medium...
Chromium: CVE-2026-84329 Confused deputy in CredentialProvider
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
SUSE CVE-2026-84329
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
EUVD-2026-69750
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-84329
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-84329
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-84329
A flaw was found in Google Chrome. This vulnerability, known as a confused deputy, exists within the CredentialProvider component. A remote attacker, who has already compromised the browser's renderer process, could exploit this by presenting a specially crafted HTML page. Successful exploitation...
CVE-2026-84329
Confused deputy in CredentialProvider in Google Chrome on on Windows p...
Linux Distros Unpatched Vulnerability : CVE-2026-84329
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process t...
CVE-2026-84329
A confused deputy vulnerability in the CredentialProvider component of Google Chrome on Windows (prior to 152.0.7977.75 ) allowed a remote attacker who had already compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium rates the severity as Low ; the CVSS...
CVE-2026-84329
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
CVE-2026-84329
Confused deputy in CredentialProvider in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak sensitive information via a crafted HTML page. Chromium security severity: Low...
PT-2026-84550
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description A confused deputy issue exists in the CredentialProvider on Windows. A remote attacker who has already compromised the renderer process can leak sensitive information by using a special...