Lucene search
+L

381 matches found

OSV
OSV
•added 2025/02/13 8:57 a.m.•17 views

OPENSUSE-SU-2025:0058-1 Security update for chromium

This update for chromium fixes the following issues: - Chromium 133.0.6943.53 stable released 2024-02-04 boo1236806 CVE-2025-0444: Use after free in Skia CVE-2025-0445: Use after free in V8 CVE-2025-0451: Inappropriate implementation in Extensions API - Chromium 133.0.6943.35 beta released...

6.3CVSS6.9AI score0.00464EPSS
SaveExploits0References5
OPENSUSE Linux
OPENSUSE Linux
•added 2025/02/13 12:00 a.m.•17 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2025:0058-1 Rating: important References: 1236806 Cross-References: CVE-2025-0444 CVE-2025-0445 CVE-2025-0451 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes three vulnerabilities is now...

6.3CVSS6.8AI score0.00464EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2025/02/06 8:00 a.m.•32 views

Chromium: CVE-2025-0451 Inappropriate implementation in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.3CVSS6.9AI score0.0037EPSS
SaveExploits0
OSV
OSV
•added 2025/02/04 7:15 p.m.•23 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.3CVSS6.3AI score
SaveExploits0References2
NVD
NVD
•added 2025/02/04 7:15 p.m.•20 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.3CVSS0.0037EPSS
SaveExploits0References2
CVE
CVE
•added 2025/02/04 6:53 p.m.•369 views

CVE-2025-0451

An inappropriate implementation in the Extensions API of Google Chrome prior to version 133.0.6943.53 allows a remote attacker to perform UI spoofing . This attack requires the user to engage in specific UI gestures and is executed via a crafted Chrome Extension . The vulnerability is classified ...

6.3CVSS6.4AI score0.0037EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2025/02/04 6:53 p.m.•29 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

0.0037EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/02/04 6:53 p.m.•25 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.3CVSS7AI score0.0037EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2025/02/04 6:53 p.m.•12 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.1AI score0.0037EPSS
SaveExploits0References2
Mend
Mend
•added 2025/02/04 6:53 p.m.•4 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.3CVSS0.0037EPSS
SaveExploits0References2
FreeBSD
FreeBSD
•added 2025/02/04 12:00 a.m.•21 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 12 security fixes: 390889644 High CVE-2025-0444: Use after free in Skia. Reported by Francisco Alonso @revskills on 2025-01-19 392521083 High CVE-2025-0445: Use after free in V8. Reported by 303f06e3 on 2025-01-27 40061026 Medium CVE-2025-0451:...

6.3CVSS6.9AI score0.00464EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/02/04 12:00 a.m.•24 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome prior to version 133.0.6943.53, which stems from an improper implementation in the Extensions API that allows remote attackers to convince a user to engage in specific UI gestur...

6.3CVSS6.5AI score0.0037EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2025/02/04 12:00 a.m.•20 views

Google Chrome < 133.0.6943.53 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 133.0.6943.53. It is, therefore, affected by multiple vulnerabilities as referenced in the 202502stable-channel-update-for-desktop advisory. - Inappropriate implementation in Extensions API in Google Chrome prior to...

6.3CVSS7.7AI score0.00464EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2025/02/04 12:00 a.m.•3 views

PT-2025-3890

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 133.0.6943.53 Description The issue is related to an inappropriate implementation in the Extensions API, allowing a remote attacker to perform UI spoofing via a crafted Chrome Extension if the user is convinced ...

7.5CVSS0.0037EPSS
SaveExploits0References37
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•4 views

CVE-2025-0451: User Interface (UI) Misrepresentation of Critical Information

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.3CVSS5.6AI score0.0037EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•109 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10086-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.00985EPSS
SaveExploits3References2
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2024/02/07 12:00 a.m.•152 views

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to OS version: 15699.58.0 Browser version: 121.0.6167.159 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta Specific:...

9.8CVSS7.5AI score0.00579EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/01/31 12:00 a.m.•16 views

The vulnerability of the Extensions API for Microsoft Edge and Google Chrome browsers allows a perpetrator to access confidential information.

The vulnerability of the Extensions API for Microsoft Edge and Google Chrome relates to improper security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to access confidential information...

5CVSS5.5AI score0.00579EPSS
SaveExploits0References14Affected Software6
CNVD
CNVD
•added 2024/01/26 12:00 a.m.•106 views

Google Chrome Security Bypass Vulnerability (CNVD-2024-10242)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome version 121.0.6167.85 and prior versions due to an improper implementation in the Extensions API. An attacker can exploit the vulnerability to bypass security restrictions...

4.3CVSS6.3AI score0.00579EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2024/01/25 8:00 a.m.•57 views

Chromium: CVE-2024-0811 Inappropriate implementation in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6.4AI score0.00579EPSS
SaveExploits0
Rows per page
Query Builder