Lucene search
+L

7507 matches found

NVD
NVD
•added 2026/07/08 11:16 p.m.•28 views

CVE-2026-15130

Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

4.3CVSS0.00267EPSS
SaveExploits0References2
osv-debian
osv-debian
•added 2026/07/08 11:16 p.m.•13 views

DEBIAN-CVE-2026-15131

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.4AI score0.00267EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/08 10:36 p.m.•25 views

CVE-2026-15131

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

5.4AI score0.00267EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/07/08 10:36 p.m.•78 views

CVE-2026-15131

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

0.00267EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/07/08 10:36 p.m.•16 views

CVE-2026-15131

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

5.4AI score0.00267EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/07/08 10:36 p.m.•40 views

CVE-2026-15131

Inappropriate implementation in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.4AI score0.00267EPSS
SaveExploits0
CVE
CVE
•added 2026/07/08 10:36 p.m.•276 views

CVE-2026-15131

A vulnerability exists in the Navigation component of the Google Chrome and Microsoft Edge web browsers (specifically Chromium ). The issue stems from insufficient validation of input data , which allows a remote attacker to bypass site isolation using a specially crafted HTML page. This bypass c...

4.3CVSS5.4AI score0.00267EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/07/08 10:36 p.m.•12 views

CVE-2026-15130

Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

5.7AI score0.00267EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/07/08 10:36 p.m.•37 views

CVE-2026-15130

Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

4.3CVSS5.7AI score0.00267EPSS
SaveExploits0
CVE
CVE
•added 2026/07/08 10:36 p.m.•295 views

CVE-2026-15130

The Navigation component in Google Chrome and Microsoft Edge web browsers is vulnerable to a site isolation bypass due to insufficient policy enforcement. A remote attacker can exploit this by using a crafted HTML page to access confidential data . Affected versions of Google Chrome include those...

4.3CVSS5.7AI score0.00267EPSS
SaveExploits0References2Affected Software1
attackerkb
attackerkb
•added 2026/07/08 10:36 p.m.•18 views

CVE-2026-15130

Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

5.7AI score0.00267EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/07/08 10:36 p.m.•80 views

CVE-2026-15130

Insufficient policy enforcement in Navigation in Google Chrome prior to 150.0.7871.115 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: High...

0.00267EPSS
SaveExploits0References2
NVD
NVD
•added 2026/07/08 5:17 p.m.•31 views

CVE-2026-59896

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.11.8 before 4.12.27, hono/jsx did not isolate context values per request during server-side rendering, allowing createContext, useContext, jsxRenderer, or useRequestContext data from a different in-flight...

6.5CVSS0.00299EPSS
SaveExploits0References3
CVE
CVE
•added 2026/07/08 4:08 p.m.•108 views

CVE-2026-59896

Hono/jsx in the Hono web framework exposes a cross-request data disclosure during server-side rendering. From version 4.11.8 up to, but not including, 4.12.27, context values created via createContext, useContext, jsxRenderer, or useRequestContext were not isolated per request and could be reused...

6.5CVSS5.9AI score0.00299EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/07/08 4:08 p.m.•62 views

CVE-2026-59896 hono/jsx does not isolate context per request, leading to cross-request data disclosure

Hono is a Web application framework that provides support for any JavaScript runtime. From 4.11.8 before 4.12.27, hono/jsx did not isolate context values per request during server-side rendering, allowing createContext, useContext, jsxRenderer, or useRequestContext data from a different in-flight...

6.5CVSS0.00299EPSS
SaveExploits0References3
GithubExploit
GithubExploit
•added 2026/07/08 10:18 a.m.•92 views

windows7-eternalblue-lab

MS17-010 EternalBlue Exploitation Lab Hands-on penetration t...

9.3CVSS7.8AI score0.93307EPSS
SaveExploits50
EUVD
EUVD
•added 2026/07/08 12:37 a.m.•21 views

EUVD-2026-42109

The public dashboard deletion endpoint does not enforce organization isolation, allowing an Org Admin in one organization to delete public dashboards belonging to a different organization by supplying the target dashboard's identifiers...

3.1CVSS5.7AI score0.00227EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/07/08 12:00 a.m.•23 views

PT-2026-56506

Name of the Vulnerable Software and Affected Versions Hono versions 4.11.8 through 4.12.26 Description During server-side rendering, the hono/jsx module fails to isolate context values on a per-request basis. This allows data from a different in-flight request to be accessed after an await...

6.5CVSS5.8AI score0.00299EPSS
SaveExploits0References14
Positive Technologies
Positive Technologies
•added 2026/07/08 12:00 a.m.•45 views

PT-2026-61024

Name of the Vulnerable Software and Affected Versions xrdp versions prior to 0.10.6.1 Description An issue exists when an authenticated user session is initialized using the Xvnc backend over UNIX domain sockets, as the Xvnc process is launched with insufficient authentication mechanisms. A local...

8CVSS7.2AI score0.00187EPSS
SaveExploits0References28
Positive Technologies
Positive Technologies
•added 2026/07/08 12:00 a.m.•35 views

PT-2026-56650

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 150.0.7871.115 Description An inappropriate implementation in the Navigation component allows a remote attacker to bypass site isolation by using a crafted HTML page. Site isolation is a security feature that...

5CVSS6.5AI score0.00267EPSS
SaveExploits0
Rows per page
Query Builder