Lucene search
K

290 matches found

Debian CVE
Debian CVE
added 2022/07/27 9:19 p.m.33 views

CVE-2022-1868

Inappropriate implementation in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page...

6.5CVSS7.3AI score0.00476EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2022/07/27 9:19 p.m.56 views

CVE-2022-1868

Inappropriate implementation in Extensions API in Google Chrome prior to 102.0.5005.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted HTML page...

6.5CVSS7AI score0.00476EPSS
Exploits0
NVD
NVD
added 2022/07/26 10:15 p.m.11 views

CVE-2022-1488

Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

4.3CVSS0.00483EPSS
Exploits1References3
ATTACKERKB
ATTACKERKB
added 2022/07/26 10:15 p.m.5 views

CVE-2022-1488

Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

4.3CVSS5.8AI score0.00483EPSS
Exploits1References4
OSV
OSV
added 2022/07/26 10:15 p.m.1 views

DEBIAN-CVE-2022-1488

Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

4.3CVSS5.5AI score0.00483EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2022/07/26 10:15 p.m.36 views

CVE-2022-1488

Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

4.3CVSS6.3AI score0.00483EPSS
Exploits1References1
Prion
Prion
added 2022/07/26 10:15 p.m.15 views

Design/Logic Flaw

Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

4.3CVSS5AI score0.00483EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2022/07/26 9:32 p.m.24 views

CVE-2022-1488

Inappropriate implementation in Extensions API in Google Chrome prior to 101.0.4951.41 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension...

5.5AI score0.00483EPSS
Exploits1References3
CVE
CVE
added 2022/07/26 9:32 p.m.230 views

CVE-2022-1488

CVE-2022-1488 involves Google Chrome’s Extensions API. The issue is described as an Inappropriate implementation in Extensions API, allowing a user-assisted attacker to leak cross-origin data via a crafted Chrome Extension. Affected software is Chrome prior to version 101.0.4951.41 (the policy wa...

4.3CVSS5AI score0.00483EPSS
Exploits1References3Affected Software1
OSV
OSV
added 2022/06/29 9:28 a.m.11 views

OPENSUSE-SU-2022:10036-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 103.0.5060.53 boo1200783 CVE-2022-2156: Use after free in Base CVE-2022-2157: Use after free in Interest groups CVE-2022-2158: Type Confusion in V8 CVE-2022-2160: Insufficient policy enforcement in DevTools CVE-2022-2161: Use after fre...

8.8CVSS6.9AI score0.01286EPSS
Exploits1References11
OpenVAS
OpenVAS
added 2022/06/27 12:0 a.m.37 views

Mageia: Security Advisory (MGASA-2022-0241)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.2AI score0.01286EPSS
Exploits1References5
Microsoft CVE
Microsoft CVE
added 2022/06/23 7:0 a.m.44 views

Chromium: CVE-2022-2164 Inappropriate implementation in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.3CVSS7.1AI score0.00526EPSS
Exploits0
CNNVD
CNNVD
added 2022/06/21 12:0 a.m.4 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from an improper implementation in the Extensions API...

6.3CVSS7.5AI score0.00526EPSS
Exploits0References12
OPENSUSE Linux
OPENSUSE Linux
added 2022/06/15 12:0 a.m.47 views

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10009-1 Rating: critical References: 1199893 1200139 1200423 Cross-References: CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861...

9.6CVSS9.1AI score0.0106EPSS
Exploits3References3
Microsoft CVE
Microsoft CVE
added 2022/05/31 7:0 a.m.55 views

Chromium: CVE-2022-1868 Inappropriate implementation in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.5AI score0.00476EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2022/05/31 7:0 a.m.60 views

Chromium: CVE-2022-1872 Insufficient policy enforcement in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6.3AI score0.00456EPSS
Exploits0
CNVD
CNVD
added 2022/05/26 12:0 a.m.8 views

Google Chrome Extensions API Security Feature Issue Vulnerability

Google Chrome is a web browser from Google, an American company. A security signature issue vulnerability exists in versions of Google Chrome prior to 102.0.5005.61, which stems from an incorrect implementation of the Extensions API. The vulnerability can be exploited by an attacker to trick a...

6.5CVSS6.3AI score0.00476EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/05/24 12:0 a.m.4 views

Google Chrome 安全特征问题漏洞

Google Chrome is a web browser from Google, an American company. A security signature issue vulnerability exists in versions of Google Chrome prior to 102.0.5005.61, which stems from an incorrect implementation of the Extensions API. The vulnerability can be exploited by an attacker to trick a...

6.5CVSS8.2AI score0.00476EPSS
Exploits0References11
CNNVD
CNNVD
added 2022/05/24 12:0 a.m.4 views

Google Chrome 权限许可和访问控制问题漏洞

Google Chrome is a web browser from Google, Inc. A privilege permission and access control issue vulnerability exists in Google Chrome versions 70.0.3538.67 through 101.0.4951.67, which stems from insufficient policy enforcement in the Extensions API. A remote attacker could exploit the...

4.3CVSS7AI score0.00456EPSS
Exploits0References12
RedhatCVE
RedhatCVE
added 2022/05/20 11:10 p.m.31 views

CVE-2021-30610

Chromium: CVE-2021-30610 Use after free in Extensions API...

8.8CVSS1.5AI score0.04136EPSS
Exploits0References1
Rows per page
Query Builder