Lucene search
K

16737 matches found

Debian CVE
Debian CVE
added 2026/05/12 2:24 p.m.3 views

CVE-2026-8401

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...

9.8CVSS5.8AI score0.00309EPSS
Exploits0
Cvelist
Cvelist
added 2026/05/12 2:24 p.m.31 views

CVE-2026-8401 Sandbox escape in the Profile Backup component

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...

0.00309EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/05/12 2:24 p.m.5 views

CVE-2026-8401

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...

9.8CVSS5.8AI score0.00309EPSS
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/05/12 2:24 p.m.5 views

CVE-2026-8401 Sandbox escape in the Profile Backup component

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...

5.8AI score0.00309EPSS
Exploits0References5
CVE
CVE
added 2026/05/12 2:24 p.m.22 views

CVE-2026-8401

CVE-2026-8401 is a Firefox vulnerability describing a sandbox escape in the Profile Backup component. The issue is fixed in Firefox 150.0.3 per MFSA2026-45 and EU/OSV/NVD entries. Affected product: Mozilla Firefox (Profile Backup sandbox escape). Root cause details are not elaborated beyond the c...

9.8CVSS5.8AI score0.00309EPSS
Exploits0References5Affected Software1
AlpineLinux
AlpineLinux
added 2026/05/12 2:24 p.m.9 views

CVE-2026-8401

Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...

9.8CVSS5.8AI score0.00309EPSS
Exploits0References5
OSV
OSV
added 2026/05/12 12:0 p.m.5 views

SUSE-SU-2026:1830-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues Updated to Firefox Extended Support Release 140.10.2 ESR bsc1264378,MFSA 2026-41: - CVE-2026-8090: Use-after-free in the DOM: Networking component. - CVE-2026-8092: Memory safety bugs fixed in Firefox ESR 115.35.2, Firefox ESR 140.10.2 and...

9.8CVSS6AI score0.00476EPSS
Exploits0References11
OSV
OSV
added 2026/05/12 12:0 p.m.2 views

SUSE-SU-2026:1829-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues Updated to Firefox Extended Support Release 140.10.1 ESR bsc1263110,MFSA 2026-36: - CVE-2026-7320: Information disclosure due to incorrect boundary conditions in the Audio/Video component. - CVE-2026-7321: Sandbox escape due to incorrect...

9.6CVSS6AI score0.00314EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.10 views

PT-2026-40452

Name of the Vulnerable Software and Affected Versions Heym versions prior to 0.0.21 Description A sandbox escape exists in the custom Python tool executor. Authenticated workflow authors can bypass sandbox restrictions using object-graph introspection primitives. By employing Python introspection...

8.8CVSS6AI score0.00227EPSS
Exploits0References9
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.7 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability, which stemmed from the reuse of UI components after they were released. This vulnerability could allow remote attackers to achieve sandbox escap...

9.6CVSS5.8AI score0.00234EPSS
Exploits0References3
Redos
Redos
added 2026/05/12 12:0 a.m.9 views

ROS-20260512-73-0008

A vulnerability in the escapebytestring function of the gio/gfileattribute.c component of the GLib library set is related to integer overflow. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

6.5CVSS6.7AI score0.00504EPSS
Exploits0
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.9 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability. This vulnerability stemmed from the issue of reusing Input components after they were released, which could allow remote attackers who have...

8.3CVSS5.9AI score0.00207EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.6 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. In versions prior to 148.0.7778.168, there was a resource management vulnerability that stemmed from the reuse of resources after Mojo was released. This vulnerability could allow remote attackers to exploit the system by using a specially...

9.6CVSS5.8AI score0.00211EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.7 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability. This vulnerability stemmed from the reuse of Core objects after its release, which could allow remote attackers to exploit the vulnerability...

8.3CVSS5.8AI score0.00182EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/12 12:0 a.m.5 views

PT-2026-41110

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description A use after free issue in the GPU component allows a remote attacker to execute arbitrary code within a sandbox by utilizing a specially crafted HTML page. Use after free is a memory...

9.6CVSS6.2AI score0.00498EPSS
Exploits0References95
Tenable Nessus
Tenable Nessus
added 2026/05/12 12:0 a.m.7 views

Microsoft Edge (Chromium) < 148.0.3967.55 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 148.0.3967.55. It is, therefore, affected by multiple vulnerabilities as referenced in the May 11, 2026 advisory. - Insufficient validation of untrusted input in Media in Google Chrome on Android prior to 148.0.7778.96...

8.3CVSS6.2AI score0.00652EPSS
Exploits0References27
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.7 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability. This vulnerability stemmed from a problem with the reuse of resources after their release in the FileSystem component. It could allow remote...

8.3CVSS5.8AI score0.00207EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.6 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability. This vulnerability stemmed from a reuse issue in the Aura component after release, which could allow remote attackers who have breached the...

8.3CVSS5.8AI score0.00207EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.6 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability. This vulnerability stemmed from a reuse issue in the HID component after release, which could allow remote attackers to exploit the situation by...

8.3CVSS5.8AI score0.00207EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.7 views

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a race condition vulnerability, which originated from a race condition issue in the Payments component. This vulnerability could allow remote attackers to exploit the system by usin...

8.3CVSS5.8AI score0.00166EPSS
Exploits0References3
Rows per page
Query Builder