18440 matches found
CVE-2025-3069
CVE-2025-3069 affects Google Chrome/Chromium Extensions: an inappropriate implementation in the Extensions component allows privilege escalation via a crafted HTML page. Vulnerable before 135.0.7049.52; exploitation requires user interaction and a crafted HTML page, with a remote (network) attack...
CVE-2025-3066
CVE-2025-3066: In Google Chrome/Chromium, a use-after-free in Site Isolation could allow a remote attacker to trigger heap corruption via a crafted HTML page. The issue affects Chrome before 135.0.7049.84; a security fix was released in the ChromeOS/Chrome desktop Stable channel update to 135.0.7...
CVE-2025-3069
Inappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-3068
Inappropriate implementation in Intents in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
PT-2025-14454 · Google +2 · Google Chrome +2
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.52 Description: The issue is related to an inappropriate implementation in Custom Tabs, allowing a remote attacker to perform UI spoofing via a crafted HTML page if the user is convinced to engage in...
Google Chrome < 135.0.7049.41 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 135.0.7049.41. It is, therefore, affected by multiple vulnerabilities as referenced in the 202504stable-channel-update-for-desktop advisory. - Inappropriate implementation in Downloads in Google Chrome prior to...
Geovision GV-ASManager 6.1.10 Cross Site Request Forgery
Geovision GV-ASManager versions 6.1.10 and below suffer from a cross site request forgery vulnerability. CVE-2024-56901 CVE-2024-56901 - A Cross-Site Request Forgery CSRF vulnerability in Geovision GV-ASManager web application with the version 6.1.1.0 or less that allows attackers to arbitrarily...
EUVD-2025-6763
Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...
CVE-2025-2137
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-2135
Type Confusion in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
The vulnerability of the JavaScript script handler interface of Google Chrome’s V8 engine allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the JavaScript script handler interface of Google Chrome’s V8 engine is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
The vulnerability of Google Chrome’s user interface allows a perpetrator to replace the user interface.
The vulnerability of Google Chrome’s user interface is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...
The vulnerability of Google Chrome, related to errors in the user interface’s information representation, allows a perpetrator to replace the user interface.
The vulnerability of Google Chrome relates to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to replace the user interface with a specially created HTML page...
The vulnerability of the Media Stream component of the Google Chrome browser, which allows a perpetrator to gain unauthorized access to protected information
The vulnerability of the Media Stream component in the Google Chrome browser relates to the exposure of confidential information through metadata. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information via a specially created HTML page...
SUSE CVE-2025-2137
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...
Microsoft Edge (Chromium) < 134.0.3124.66 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 134.0.3124.66. It is, therefore, affected by multiple vulnerabilities as referenced in the March 12, 2025 advisory. - Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perfor...
CVE-2025-2137
Out of bounds read in V8 in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: Medium...
CVE-2025-2136
Use after free in Inspector in Google Chrome prior to 134.0.6998.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
