Lucene search
K

174 matches found

EUVD
EUVD
added 2026/05/14 7:52 p.m.4 views

EUVD-2026-30425

Use after free in FileSystem in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS5.8AI score0.00073EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/05/14 12:0 a.m.4 views

PT-2026-41080

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description A use after free issue in Downloads allows a remote attacker to execute arbitrary code via a crafted HTML page, provided they can convince a user to perform specific UI gestures. Use...

8.8CVSS6.2AI score0.00148EPSS
Exploits0References83
Positive Technologies
Positive Technologies
added 2026/05/14 12:0 a.m.5 views

PT-2026-41045

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description Insufficient validation of untrusted input in DataTransfer allows a remote attacker to obtain potentially sensitive information from process memory. This occurs when a user is convince...

8.8CVSS5.9AI score0.00148EPSS
Exploits0References84
Positive Technologies
Positive Technologies
added 2026/05/14 12:0 a.m.5 views

PT-2026-41044

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description A use after free issue in the Human Interface Device HID component allows a remote attacker to potentially perform a sandbox escape. This occurs when a user is convinced to perform...

8.8CVSS5.8AI score0.00148EPSS
Exploits0References84
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.6 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a vulnerability related to input validation. This vulnerability stemmed from insufficient validation of untrusted inputs in the DataTransfer component. It could allow remote attacke...

5.3CVSS5.8AI score0.00043EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.6 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability. This vulnerability stemmed from a problem with the reuse of resources after their release in the FileSystem component. It could allow remote...

8.3CVSS5.8AI score0.00073EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/12 12:0 a.m.5 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.168 contained a resource management vulnerability. This vulnerability stemmed from a problem with the release-after-reuse mechanism in the Downloads component, which could allow a remote attacker...

8.8CVSS6.2AI score0.00086EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2026/05/08 2:27 a.m.5 views

SUSE CVE-2026-7897

Use after free in Mobile in Google Chrome on iOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: Critical...

7.5CVSS6.2AI score0.00088EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/06 9:31 p.m.2 views

EUVD-2026-28087

Insufficient validation of untrusted input in UI in Google Chrome on Linux, ChromeOS prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS6.2AI score0.00127EPSS
Exploits0References3
NVD
NVD
added 2026/05/06 7:16 p.m.3 views

CVE-2026-8022

Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted MHTML page. Chromium security severity: Low...

3.1CVSS0.00005EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2026/05/06 6:13 p.m.6 views

CVE-2026-8022

Inappropriate implementation in MHTML in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross-origin data via a crafted MHTML page. Chromium security severity: Low...

3.1CVSS5.8AI score0.00005EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2026/05/05 12:0 a.m.6 views

PT-2026-38215

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description An inappropriate implementation in MHTML MIME HTML, a web page archive format allows a remote attacker to leak cross-origin data. This occurs when a user is convinced to perform specifi...

9.6CVSS5.8AI score0.00161EPSS
Exploits0References137
Positive Technologies
Positive Technologies
added 2026/05/05 12:0 a.m.5 views

PT-2026-38122

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description A use after free issue exists in MediaRecording. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker ca...

9.6CVSS6.1AI score0.00161EPSS
Exploits0References135
CNNVD
CNNVD
added 2026/05/05 12:0 a.m.6 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.96 contained a resource management vulnerability. This vulnerability stemmed from the reuse of resources after the MediaRecording function was released, which could allow remote attackers to...

7.5CVSS6.2AI score0.00088EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/05 12:0 a.m.7 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.96 contained a resource management vulnerability. This vulnerability stemmed from the reuse of resources after their release in the mobile version. It could allow remote attackers to exploit this...

7.5CVSS5.9AI score0.00088EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/04/18 12:0 a.m.5 views

PT-2026-38090

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 148.0.7778.96 Description A use after free issue in the mobile component allows a remote attacker to execute arbitrary code via a crafted HTML page, provided they can convince a user to perform specific U...

9.6CVSS6.2AI score0.00136EPSS
Exploits0References143
SUSE CVE
SUSE CVE
added 2026/04/17 12:4 p.m.2 views

SUSE CVE-2026-6308

Out of bounds read in Media in Google Chrome prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

7.5CVSS6.2AI score0.00039EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/04/16 2:14 a.m.2 views

CVE-2026-6315

An use after free flaw was found in the Permissions component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499247910...

9.6CVSS5.7AI score0.00045EPSS
Exploits0References5
EUVD
EUVD
added 2026/04/15 9:30 p.m.0 views

EUVD-2026-23080

Use after free in Payments in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: Medium...

6.2AI score0.0005EPSS
Exploits0References3
NVD
NVD
added 2026/04/15 8:16 p.m.1 views

CVE-2026-6315

Use after free in Permissions in Google Chrome on Android prior to 147.0.7727.101 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00045EPSS
Exploits0References2
Rows per page
Query Builder