3495 matches found
Google Chrome Insufficient Policy Enforcement Vulnerability
Google Chrome is a free web browser developed by Google Inc. Google Chrome suffers from a policy enforcement insufficiency vulnerability, which stems from Devtools Policy Enforcement Insufficiency, and can be exploited by an attacker to cause a cross-origin data leak...
The vulnerability of the DevTools set of tools for web development in the Google Chrome browser allows a hacker to execute arbitrary code.
The vulnerability of the DevTools set of tools for web development in Google Chrome is related to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
The vulnerability of Google Chrome’s Devtools component allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Google Chrome’s Devtools component is related to a flaw in the data protection mechanism. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2025-52662
A vulnerability in Nuxt DevTools has been fixed in version 2.6.4. This issue may have allowed Nuxt auth token extraction via XSS under certain configurations. All users are encouraged to upgrade. More details: https://vercel.com/changelog/cve-2025-52662-xss-on-nuxt-devtools...
Exploit for CVE-2025-12907
CVE-2025-12907-...
DEBIAN-CVE-2025-12909
Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Devtools. Chromium security severity: Low...
DEBIAN-CVE-2025-12907
Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. Chromium security severity: Low...
CVE-2025-12907
Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. Chromium security severity: Low...
CVE-2025-12909
Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Devtools. Chromium security severity: Low...
CVE-2025-12907
Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. Chromium security severity: Low...
CVE-2025-12909: Protection Mechanism Failure
Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to leak cross-origin data via Devtools. Chromium security severity: Low...
Google Chrome 输入验证错误漏洞
Google Chrome is a free web browser developed by Google Inc. Google Chrome suffers from an input validation error vulnerability that stems from insufficient validation of untrustworthy input in Devtools, which can be exploited by an attacker to execute arbitrary code...
CVE-2025-12907: Improper Input Validation
Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. Chromium security severity: Low...
Google Chrome 安全漏洞
Google Chrome is a free web browser developed by Google Inc. Google Chrome suffers from a policy enforcement insufficiency vulnerability, which stems from Devtools Policy Enforcement Insufficiency, and can be exploited by an attacker to cause a cross-origin data leak...
Access Control Bypass
Overview chrome-devtools-frontend is a Chrome DevTools UI Affected versions of this package are vulnerable to Access Control Bypass due to insufficient Content Security Policy enforcement in the Network.loadNetworkResource method of the DevTools protocol network handler. An attacker can exfiltrat...
3rd-party-cpu-abuser (>=1.0.0, <=1.4.0), @2lkit/devtools (0.0.1-0) +163 more potentially affected by CVE-2025-12909 via chrome-devtools-frontend (>=1.0.377119-1, <=1.0.746710)
chrome-devtools-frontend NPM version =1.0.377119-1, =1.0.0, =1.2.2-beta, =0.1.0, =0.1.0, =0.0.1, =1.0.0, =1.3.0-1, =1.0.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2025-12909 Source advisory: SNYK:JS-CHROMEDEVTOOLSFRONTEND-13865282...
3rd-party-cpu-abuser (>=1.0.0, <=1.4.0), @2lkit/devtools (0.0.1-0) +163 more potentially affected by CVE-2025-12907 via chrome-devtools-frontend (>=1.0.377119-1, <=1.0.746710)
chrome-devtools-frontend NPM version =1.0.377119-1, =1.0.0, =1.2.2-beta, =0.1.0, =0.1.0, =0.0.1, =1.0.0, =1.3.0-1, =1.0.1, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2025-12907 Source advisory: SNYK:JS-CHROMEDEVTOOLSFRONTEND-13866859...
Improper Neutralization
Overview chrome-devtools-frontend is a Chrome DevTools UI Affected versions of this package are vulnerable to Improper Neutralization due to insufficient sanitization of special whitespace characters in the escapeStringWin function. An attacker can execute arbitrary code by crafting malicious inp...
