Lucene search
+L

10258 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•2 views

CVE-2026-87567: User Interface (UI) Misrepresentation of Critical Information

UI misrepresentation in UrlFormatting in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to spoof address bar via a crafted domain name. Chromium security severity: Medium...

5.4CVSS5.8AI score0.00201EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•18 views

PT-2026-88695

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description A Server-side request forgery SSRF issue in the mobile version of the browser allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social...

9.8CVSS6.5AI score0.00573EPSS
SaveExploits11References239
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-87595

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Server-side request forgery in Mobile in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access...

7.8AI score0.00419EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•23 views

PT-2026-88617

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 153.0.8010.36 Description A race condition in the mobile version of the browser allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits11References238
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-87473

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access...

6.6AI score0.00286EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•2 views

CVE-2026-87473: Incorrect Authorization

Incorrect authorization in FileHandling in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

6.5CVSS6.7AI score0.00286EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•3 views

CVE-2026-87436: Incomplete Cleanup

Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted Chrome extension. Chromium security severity: Medium...

6.5CVSS6.8AI score0.00309EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-87575

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access...

5.4CVSS6AI score0.00219EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•2 views

CVE-2026-87519: Incorrect Authorization

Incorrect authorization in Safebrowsing in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.9AI score0.00286EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•23 views

PT-2026-88603

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description An inappropriate implementation in the Downloads component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits12References238
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•16 views

PT-2026-88634

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description Missing authorization in the WebView component allows a remote attacker to bypass system access restrictions through the use of crafted network traffic and social engineering...

9.8CVSS6.6AI score0.00573EPSS
SaveExploits10References238
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•23 views

PT-2026-88727

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 153.0.8010.36 Description An interpretation conflict in Safebrowsing allows a remote attacker to bypass system access restrictions through the use of a crafted file and social engineering. Recommendations...

9.6CVSS6.6AI score0.00573EPSS
SaveExploits10References241
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-87569

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in Views in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass system access...

8.8CVSS6.1AI score0.00335EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•15 views

PT-2026-88645

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 153.0.8010.36 Description An information leak exists in the mobile version of the browser that allows a remote attacker to obtain sensitive information. This is achieved by leveraging social engineering t...

9.6CVSS6.3AI score0.00573EPSS
SaveExploits11References238
NVD
NVD
•added 2026/09/08 6:21 p.m.•13 views

CVE-2026-9215

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...

6.7CVSS0.00195EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/08 6:20 p.m.•16 views

CVE-2026-81824

The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link...

6.3CVSS0.00368EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/08 5:32 p.m.•13 views

EUVD-2026-73928

The vulnerability, if exploited, could allow a miscreant to run arbitrary JavaScript code in a browser session of a PIMBoards user who was socially engineered to click on a malicious link...

6.3CVSS5.8AI score0.00368EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/08 5:06 p.m.•43 views

CVE-2026-9215 A CSRF vulnerability exists in certain NETGEAR XR series devices

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...

6.7CVSS0.00195EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/09/08 5:06 p.m.•14 views

CVE-2026-9215 A CSRF vulnerability exists in certain NETGEAR XR series devices

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...

6.4CVSS5.3AI score0.00195EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/08 5:06 p.m.•10 views

EUVD-2026-73163

A cross site request forgery CSRF vulnerability in the listed NETGEAR models allows an attacker who can leverage social engineering techniques on a router administrator to tamper with router configuration and disrupt router operations with active assistance from the router administrator. There is...

6.4CVSS4.9AI score0.00195EPSS
SaveExploits0References3
Rows per page
Query Builder