Lucene search
+L

5146 matches found

RedhatCVE
RedhatCVE
•added 2026/05/15 7:22 a.m.•21 views

CVE-2026-8521

An use after free flaw was found in the Tab Groups component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=504106200...

7.5CVSS7.3AI score0.00228EPSS
SaveExploits0References5
NVD
NVD
•added 2026/05/14 8:17 p.m.•18 views

CVE-2026-8521

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

7.5CVSS0.00228EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/05/14 8:17 p.m.•20 views

CVE-2026-8521

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

7.5CVSS8.3AI score0.00228EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/05/14 7:52 p.m.•11 views

CVE-2026-8521

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

8.3AI score0.00228EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/14 7:52 p.m.•72 views

CVE-2026-8521

Google Chrome versions prior to 148.0.7778.168 are susceptible to a use after free vulnerability in the Tab Groups component. This resource management flaw occurs when the application reuses memory after it has been freed, potentially allowing a remote attacker to execute arbitrary code via malic...

7.5CVSS8.3AI score0.00228EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/05/14 7:52 p.m.•16 views

CVE-2026-8521

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

7.5CVSS8.3AI score0.00228EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/05/14 7:52 p.m.•17 views

EUVD-2026-30435

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

7.5CVSS8.3AI score0.00228EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/14 7:52 p.m.•59 views

CVE-2026-8521

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

0.00228EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/05/14 7:52 p.m.•25 views

CVE-2026-8521

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

7.5CVSS8.3AI score0.00228EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/05/14 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-8521

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromiu...

7.5CVSS7.9AI score0.00228EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/14 12:00 a.m.•4 views

CVE-2026-8521: Use After Free

Use after free in Tab Groups in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to execute arbitrary code via malicious network traffic. Chromium security severity: Critical...

7.5CVSS8.3AI score0.00228EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/13 1:27 p.m.•60 views

EUVD-2026-29954

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the pminviteuser function in all versions up to, and including, 5.9.8.4. This makes it possible for authenticated attackers, with Subscriber-level...

7.1CVSS5.8AI score0.00377EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
•added 2026/05/13 3:48 a.m.•34 views

SUSE CVE-2026-7813

Authorization vulnerability in pgAdmin 4 server mode affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules. Multiple endpoints fetched user-owned objects without filtering by the requesting user's identity. An authenticated user could access another user's...

9.9CVSS8.5AI score0.00651EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/05/13 12:48 a.m.•32 views

EUVD-2026-29831

PowerSYSTEM Center feature for device project groups allows an authenticated user with limited permissions to perform an unauthorized deletion of project groups...

7CVSS5.8AI score0.00224EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/05/13 12:00 a.m.•31 views

PT-2026-40611

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the pm invite user function in all versions up to, and including, 5.9.8.4. This makes it possible for authenticated attackers, with Subscriber-lev...

7.1CVSS5.8AI score0.00377EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2026/05/13 12:00 a.m.•33 views

WordPress plugin ProfileGrid 安全漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows for the creation of personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be install...

7.1CVSS5.8AI score0.00377EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/13 12:00 a.m.•5 views

CVE-2026-4609: Missing Authorization

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the pminviteuser function in all versions up to, and including, 5.9.8.4. This makes it possible for authenticated attackers, with Subscriber-level...

7.1CVSS5.7AI score0.00377EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/13 12:00 a.m.•4 views

CVE-2026-4608: Improper Neutralization of Special Elements used in an SQL Command

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to blind SQL Injection via the 'rid' parameter in all versions up to, and including, 5.9.8.4 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQ...

6.5CVSS5.7AI score0.00451EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/13 12:00 a.m.•5 views

CVE-2026-4607: Missing Authorization

The ProfileGrid – User Profiles, Groups and Communities plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 5.9.8.4. This is due to the plugin not properly verifying that a user is authorized to perform an action via the pmsetgrouporder, pmsetgroupitem...

4.3CVSS5.7AI score0.00385EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/12 10:16 p.m.•21 views

CVE-2026-35555

PowerSYSTEM Center feature for device project groups allows an authenticated user with limited permissions to perform an unauthorized deletion of project groups...

7CVSS0.00224EPSS
SaveExploits0References2
Rows per page
Query Builder