Lucene search
+L

1666 matches found

CVE
CVE
•added 2026/09/09 12:09 a.m.•156 views

CVE-2026-87503

An inappropriate implementation in the Downloads component of Google Chrome on Android (prior to version 153.0.8010.36 ) allows a remote attacker to bypass system access restrictions. This can be achieved by leveraging social engineering to lead a user to a crafted HTML page . The vulnerability i...

6.5CVSS5.5AI score0.00277EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•23 views

PT-2026-88603

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 153.0.8010.36 Description An inappropriate implementation in the Downloads component allows a remote attacker to bypass system access restrictions. This is achieved by leveraging social engineering to...

9.6CVSS6.4AI score0.00573EPSS
SaveExploits12References238
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•21 views

Linux Distros Unpatched Vulnerability : CVE-2026-87503

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Inappropriate implementation in Downloads in Google Chrome on on Android prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypas...

6.5CVSS5.5AI score0.00277EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/08/28 10:47 p.m.•22 views

Inappropriate Encoding for Output Context

Overview Affected versions of this package are vulnerable to Inappropriate Encoding for Output Context in the connection process. An attacker can cause silent data corruption and potentially bypass input sanitization by manipulating the character set mid-session, leading to a mismatch between...

8.2CVSS6AI score0.00873EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/28 10:46 p.m.•24 views

EUVD-2026-68021

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The...

5.9CVSS6.2AI score0.00873EPSS
SaveExploits0References10
Vulnrichment
Vulnrichment
•added 2026/08/28 10:46 p.m.•15 views

CVE-2026-55858 MariaDB Connector/J: Inappropriate Encoding for Output Context in org.mariadb.jdbc:mariadb-java-client

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The...

5.9CVSS6.2AI score0.00873EPSS
SaveExploits0References10
Microsoft CVE
Microsoft CVE
•added 2026/08/21 5:10 a.m.•26 views

Chromium: CVE-2026-76035 Inappropriate implementation in Media

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

9.6CVSS5.8AI score0.00462EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/08/21 5:10 a.m.•143 views

Chromium: CVE-2026-76033 Inappropriate implementation in CORS

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.2CVSS5.4AI score0.00218EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/08/21 12:37 a.m.•12 views

SUSE CVE-2026-76035

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

9.6CVSS6.8AI score0.00462EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/21 12:00 a.m.•31 views

PT-2026-79346

Inappropriate Encoding for Output Context vulnerability in joshnuss xml builder XmlBuilder module allows Content Spoofing, Cross-site Scripting. This vulnerability is associated with program files lib/xml builder.ex and program routines XmlBuilder.generate/1, XmlBuilder.generate/2,...

2.1CVSS5.8AI score0.00189EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/08/19 9:47 a.m.•14 views

CVE-2026-76035

A flaw was found in Media in Google Chrome. This inappropriate implementation allows a remote attacker to execute arbitrary code outside of the browser's security sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to a compromise of the affected syste...

9.6CVSS6.7AI score0.00462EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/08/18 9:18 p.m.•18 views

CVE-2026-76035

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

9.6CVSS6.8AI score0.00462EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/08/18 8:31 p.m.•64 views

CVE-2026-76035

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

0.00462EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/18 8:31 p.m.•16 views

CVE-2026-76035

Inappropriate implementation in Media in Google Chrome on on Mac prior to 151.0.7922.169 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

6.8AI score0.00462EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/13 1:44 a.m.•65 views

CVE-2026-0289 Prisma Browser: Inappropriate Implementation in Account Protection

A security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma® Browser enables a user to bypass intended security controls...

2.1CVSS0.00225EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/13 1:44 a.m.•81 views

CVE-2026-0289

CVE-2026-0289 is a security bypass vulnerability in the Account Protection feature of Palo Alto Networks Prisma Browser , caused by an inappropriate implementation that allows a user to bypass intended security controls. The NVD assigns a CVSS 3.1 score of 6.5 (MEDIUM) with a network attack vecto...

6.5CVSS5.8AI score0.00225EPSS
SaveExploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
•added 2026/08/12 12:03 a.m.•19 views

CVE-2026-19168 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS7.8AI score0.00413EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/08/12 12:02 a.m.•19 views

CVE-2026-19152 Inappropriate implementation in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.3CVSS7.7AI score0.00304EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2026/08/12 12:02 a.m.•22 views

CVE-2026-19150 Inappropriate implementation in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS7.8AI score0.00413EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/08/11 3:08 p.m.•26 views

CVE-2026-19168

A flaw was found in V8 in Google Chrome. An inappropriate implementation allows a remote attacker to execute arbitrary code within the browser's sandbox. This can be achieved by enticing a user to visit a specially crafted HTML page, leading to unauthorized code execution...

8.8CVSS8.3AI score0.00413EPSS
SaveExploits0References5
Rows per page
Query Builder