Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

8629 matches found

NVD
NVD•added 2019/06/27 5:15 p.m.•20 views

CVE-2018-6176

Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension...

7.8CVSS7.7AI score0.00486EPSS
SaveExploits0References2
NVD
NVD•added 2019/06/27 5:15 p.m.•20 views

CVE-2018-6138

Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

8.1CVSS6.4AI score0.00632EPSS
SaveExploits0References2
OSV
OSV•added 2019/06/27 5:15 p.m.•5 views

CVE-2018-6138

Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

8.1CVSS5.8AI score0.00632EPSS
SaveExploits0References2
OSV
OSV•added 2019/06/27 5:15 p.m.•5 views

CVE-2018-16086

Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

5.4CVSS5.8AI score0.00466EPSS
SaveExploits0References2
NVD
NVD•added 2019/06/27 5:15 p.m.•30 views

CVE-2018-16064

Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

6.5CVSS6.1AI score0.00492EPSS
SaveExploits0References2
OSV
OSV•added 2019/06/27 5:15 p.m.•6 views

CVE-2018-16064

Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

6.5CVSS5.8AI score0.00492EPSS
SaveExploits0References2
Prion
Prion•added 2019/06/27 5:15 p.m.•23 views

Input validation

Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

4.3CVSS5.9AI score0.00492EPSS
SaveExploits0References2Affected Software1
Prion
Prion•added 2019/06/27 5:15 p.m.•17 views

Authorization

Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension...

4.6CVSS7.8AI score0.00486EPSS
SaveExploits0References2Affected Software1
OSV
OSV•added 2019/06/27 5:15 p.m.•11 views

UBUNTU-CVE-2018-16064

Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

6.5CVSS6.8AI score0.00492EPSS
SaveExploits0References4
OSV
OSV•added 2019/06/27 5:15 p.m.•6 views

UBUNTU-CVE-2019-5838

Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension...

4.3CVSS6.7AI score0.00771EPSS
SaveExploits0References3
OSV
OSV•added 2019/06/27 5:15 p.m.•7 views

UBUNTU-CVE-2018-6138

Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

8.1CVSS7.3AI score0.00632EPSS
SaveExploits0References3
OSV
OSV•added 2019/06/27 5:15 p.m.•5 views

UBUNTU-CVE-2018-16086

Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

5.4CVSS5.8AI score0.00466EPSS
SaveExploits0References3
OSV
OSV•added 2019/06/27 5:15 p.m.•8 views

UBUNTU-CVE-2018-6176

Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension...

7.8CVSS7.2AI score0.00486EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve•added 2019/06/27 5:15 p.m.•24 views

CVE-2019-5838

Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension...

4.3CVSS6.8AI score0.00771EPSS
SaveExploits0References2
Prion
Prion•added 2019/06/27 5:15 p.m.•19 views

Code injection

Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

5.8CVSS7.8AI score0.00632EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve•added 2019/06/27 5:15 p.m.•29 views

CVE-2018-6138

Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

8.1CVSS7.2AI score0.00632EPSS
SaveExploits0References2
Cvelist
Cvelist•added 2019/06/27 4:13 p.m.•29 views

CVE-2019-5838

Insufficient policy enforcement in extensions API in Google Chrome prior to 75.0.3770.80 allowed an attacker who convinced a user to install a malicious extension to bypass restrictions on file URIs via a crafted Chrome Extension...

5.3AI score0.00771EPSS
SaveExploits0References8
CVE
CVE•added 2019/06/27 4:13 p.m.•308 views

CVE-2019-5838

CVE-2019-5838 : Insufficient policy enforcement in Chrome extensions API allowed a user-went-through-a-malicious-extension attack to bypass file URI restrictions. Affected: Google Chrome/Chromium prior to 75.0.3770.80. Impact is that a crafted extension could enable access to file URIs that shoul...

4.3CVSS5.1AI score0.00771EPSS
SaveExploits0References8Affected Software1
CVE
CVE•added 2019/06/27 4:13 p.m.•122 views

CVE-2018-6176

CVE-2018-6176 affects Google Chrome/Chromium: insufficient file-type enforcement in the Extensions API enables privilege escalation via a crafted extension when the renderer is compromised. Several advisories (Debian DSA, Gentoo GLSA, CNVD) confirm local privilege escalation via the Extensions me...

7.8CVSS7.5AI score0.00486EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist•added 2019/06/27 4:13 p.m.•25 views

CVE-2018-6176

Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension...

7.6AI score0.00486EPSS
SaveExploits0References2
Rows per page
Query Builder