Lucene search
+L

18331 matches found

OSV
OSV
added 2026/01/20 5:16 a.m.9 views

CVE-2026-0901

Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

5.4CVSS5.8AI score
SaveExploits0References2
OSV
OSV
added 2026/01/20 5:16 a.m.9 views

CVE-2026-0900

Inappropriate implementation in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.8AI score
SaveExploits0References2
CVE
CVE
added 2026/01/20 4:14 a.m.50 views

CVE-2026-0906

CVE-2026-0906 affects Google Chrome on Android (and Chromium-based builds) where the Omnibox (URL bar) can be spoofed via a crafted HTML page. Root cause: incorrect security UI handling within Chrome/Chromium before version 144.0.7559.59. Connected feeds show Chromium-based updates shipping 144.0...

9.8CVSS5.5AI score0.00321EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/01/20 4:14 a.m.6 views

CVE-2026-0906

Incorrect security UI in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Low...

5.4AI score0.00321EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/01/20 4:14 a.m.4 views

CVE-2026-0904

Incorrect security UI in Digital Credentials in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Chromium security severity: Medium...

5.4CVSS5.5AI score0.00171EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2026/01/20 4:14 a.m.62 views

CVE-2026-0901

CVE-2026-0901 affects Blink in Google Chrome on Android prior to 144.0.7559.59, enabling UI spoofing via a crafted HTML page. Connected sources indicate Chromium/Chromium-derived builds (e.g., 144.0.7559.59) have fixes, and Debian/Fedora advisories corroborate that versions around 144.0.7559.59 a...

5.4CVSS5.5AI score0.0019EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2026/01/20 4:14 a.m.67 views

CVE-2026-0900

CVE-2026-0900: In Chrome/Chromium, an inappropriate implementation in V8 prior to 144.0.7559.59 could allow a remote attacker to cause object corruption via a crafted HTML page. The issue is rated High (CVSS 8.8). References indicate fixes in Chromium/Chrome updates (e.g., Chromium 144.0.7559.59+...

8.8CVSS5.5AI score0.00329EPSS
SaveExploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/20 4:14 a.m.17 views

CVE-2026-0901

Inappropriate implementation in Blink in Google Chrome on Android prior to 144.0.7559.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

5.4CVSS5.5AI score0.0019EPSS
SaveExploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/01/20 4:14 a.m.23 views

CVE-2026-0899

Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.5AI score0.00389EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/01/20 4:14 a.m.32 views

CVE-2026-0899

Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

0.00389EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/01/16 12:00 a.m.13 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code and cause service interruptions.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code and cause a service denial by using a specially created HTML...

10CVSS8AI score0.00389EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/01/16 12:00 a.m.10 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows a hacker to gain access to and delete data.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to and delete data through a specially created HTML page...

9.4CVSS7.3AI score0.00262EPSS
SaveExploits0References11Affected Software4
AstraLinux
AstraLinux
added 2026/01/13 2:01 p.m.6 views

Astra Linux – Vulnerability in Chromium

Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.8CVSS5.6AI score0.06624EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/01/09 10:11 a.m.13 views

CVE-2019-11403

In Gradle Enterprise before 2018.5.2, Build Cache Nodes would reflect the configured password back when viewing the HTML page source of the settings page...

9.8CVSS7AI score0.01176EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.11 views

PT-2026-7646

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.45 Description An issue exists in the File input functionality of Google Chrome that could allow a remote attacker to perform UI spoofing. This is possible if the attacker convinces a user to perform...

6.5CVSS5.4AI score0.0021EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.9 views

PT-2026-26535

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description An integer overflow in ANGLE within Google Chrome, prior to version 146.0.7680.153, could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTM...

8.8CVSS6.2AI score0.00415EPSS
SaveExploits2References42
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.6 views

PT-2026-26523

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description An integer overflow exists in ANGLE within Google Chrome on Windows. This issue could allow a remote attacker to exploit heap corruption through a specially crafted HTML page. The...

8.8CVSS6.2AI score0.00415EPSS
SaveExploits2References41
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.8 views

PT-2026-26516

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description A use-after-free issue exists in the WebRTC component of Google Chrome. This flaw could allow a remote attacker to exploit heap corruption through a specially crafted HTML page. The...

8.8CVSS6.1AI score0.00415EPSS
SaveExploits2References39
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.13 views

PT-2026-20521

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 145.0.7632.109 Description A heap buffer overflow exists in the Media component of Google Chrome. This issue could allow a remote attacker to potentially exploit heap corruption through a specially crafted HTML...

8.8CVSS5.8AI score0.00642EPSS
SaveExploits0References22
Positive Technologies
Positive Technologies
added 2026/01/01 12:00 a.m.8 views

PT-2026-26518

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 146.0.7680.153 Description An issue in the V8 component of Google Chrome allows a remote attacker to potentially execute code within a sandbox environment. This can be triggered by a specially crafted HTML page...

10CVSS6.2AI score0.00354EPSS
SaveExploits1References50
Rows per page
Query Builder