Lucene search
+L

334 matches found

Vulnrichment
Vulnrichment
•added 2025/02/04 6:53 p.m.•10 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.1AI score0.0037EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/02/04 6:53 p.m.•23 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.3CVSS7AI score0.0037EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/02/04 6:53 p.m.•27 views

CVE-2025-0451

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

0.0037EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/02/04 12:00 a.m.•17 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome prior to version 133.0.6943.53, which stems from an improper implementation in the Extensions API that allows remote attackers to convince a user to engage in specific UI gestur...

6.3CVSS6.5AI score0.0037EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/04 12:00 a.m.•0 views

CVE-2025-0451: User Interface (UI) Misrepresentation of Critical Information

Inappropriate implementation in Extensions API in Google Chrome prior to 133.0.6943.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. Chromium security severity: Medium...

6.3CVSS5.6AI score0.0037EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/02/04 12:00 a.m.•16 views

Google Chrome < 133.0.6943.53 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 133.0.6943.53. It is, therefore, affected by multiple vulnerabilities as referenced in the 202502stable-channel-update-for-desktop advisory. - Inappropriate implementation in Extensions API in Google Chrome prior to...

6.3CVSS7.7AI score0.00464EPSS
SaveExploits0References7
FreeBSD
FreeBSD
•added 2025/02/04 12:00 a.m.•17 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 12 security fixes: 390889644 High CVE-2025-0444: Use after free in Skia. Reported by Francisco Alonso @revskills on 2025-01-19 392521083 High CVE-2025-0445: Use after free in V8. Reported by 303f06e3 on 2025-01-27 40061026 Medium CVE-2025-0451:...

6.3CVSS6.9AI score0.00464EPSS
SaveExploits0References1
OpenVAS
OpenVAS
•added 2024/03/04 12:00 a.m.•105 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2022:10086-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.4AI score0.00923EPSS
SaveExploits3References2
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2024/02/07 12:00 a.m.•150 views

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to OS version: 15699.58.0 Browser version: 121.0.6167.159 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta Specific:...

9.8CVSS7.5AI score0.00579EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/01/31 12:00 a.m.•13 views

The vulnerability of the Extensions API for Microsoft Edge and Google Chrome browsers allows a perpetrator to access confidential information.

The vulnerability of the Extensions API for Microsoft Edge and Google Chrome relates to improper security checks for standard elements. Exploiting this vulnerability can allow a remote attacker to access confidential information...

5CVSS5.5AI score0.00579EPSS
SaveExploits0References14Affected Software6
CNVD
CNVD
•added 2024/01/26 12:00 a.m.•103 views

Google Chrome Security Bypass Vulnerability (CNVD-2024-10242)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome version 121.0.6167.85 and prior versions due to an improper implementation in the Extensions API. An attacker can exploit the vulnerability to bypass security restrictions...

4.3CVSS6.3AI score0.00579EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2024/01/25 8:00 a.m.•49 views

Chromium: CVE-2024-0811 Inappropriate implementation in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6.4AI score0.00579EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/01/25 2:48 a.m.•11 views

SUSE CVE-2024-0811

Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...

4.3CVSS8.6AI score0.00579EPSS
SaveExploits0References3
NVD
NVD
•added 2024/01/24 12:15 a.m.•30 views

CVE-2024-0811

Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...

4.3CVSS5.7AI score0.00579EPSS
SaveExploits0References5
OSV
OSV
•added 2024/01/24 12:15 a.m.•9 views

DEBIAN-CVE-2024-0811

Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...

4.3CVSS4.8AI score0.00579EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2024/01/24 12:15 a.m.•30 views

CVE-2024-0811

Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...

4.3CVSS5.9AI score0.00579EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/01/23 11:53 p.m.•3 views

CVE-2024-0811

Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...

5.6AI score0.00579EPSS
SaveExploits0References5
CVE
CVE
•added 2024/01/23 11:53 p.m.•208 views

CVE-2024-0811

CVE-2024-0811 describes an insecure Extensions API implementation in Google Chrome prior to 121.0.6167.85 that could allow a user-assisted attacker to leak cross-origin data via a malicious extension. The issue is tied to Chrome/Chromium’s Extensions API and is labeled with a low severity. Affect...

4.3CVSS5.4AI score0.00579EPSS
SaveExploits0References5Affected Software1
Positive Technologies
Positive Technologies
•added 2024/01/23 12:00 a.m.•24 views

PT-2024-1392 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.85 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Extensions API, allowing an attacker to leak cross-origin data via a...

9.8CVSS6.7AI score0.99979EPSS
SaveExploits129References1104
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/23 12:00 a.m.•0 views

CVE-2024-0811: Undefined Security Weakness

Inappropriate implementation in Extensions API in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. Chromium security severity: Low...

4.3CVSS5.2AI score0.00579EPSS
SaveExploits0References1
Rows per page
Query Builder