Lucene search
+L

5614 matches found

osv_azl
osv_azl
•added 2025/09/24 5:15 p.m.•15 views

AZL-76335 CVE-2025-10585 affecting package nodejs24 24.13.0-3

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

9.8CVSS8.3AI score0.05391EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2025/09/24 5:15 p.m.•6 views

DEBIAN-CVE-2025-10890

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

9.1CVSS7.6AI score0.00307EPSS
SaveExploits0References1
NVD
NVD
•added 2025/09/24 5:15 p.m.•13 views

CVE-2025-10891

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.0721EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2025/09/24 5:15 p.m.•7 views

CVE-2025-10890

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

9.1CVSS5.8AI score
SaveExploits0References2
Snyk
Snyk
•added 2025/09/24 4:43 p.m.•6 views

External Control of Assumed-Immutable Web Parameter

Overview Affected versions of this package are vulnerable to External Control of Assumed-Immutable Web Parameter via the V8 process. An attacker can cause heap corruption by enticing a user to visit a specially crafted HTML page. Remediation Upgrade chromium to version 140.0.7339.207 or higher...

8.8CVSS7.8AI score0.00279EPSS
SaveExploits0References2
Snyk
Snyk
•added 2025/09/24 4:41 p.m.•5 views

Improper Protection of Physical Side Channels

Overview Affected versions of this package are vulnerable to Improper Protection of Physical Side Channels via the V8 process. An attacker can access sensitive cross-origin data by enticing a user to visit a specially crafted HTML page. Remediation Upgrade chromium to version 140.0.7339.207 or...

9.3CVSS7.8AI score0.00307EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/09/24 4:17 p.m.•44 views

CVE-2025-10892

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

0.00279EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/09/24 4:17 p.m.•2 views

CVE-2025-10892

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.6AI score0.00279EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/09/24 4:17 p.m.•32 views

CVE-2025-10892

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.6AI score0.00279EPSS
SaveExploits0
Cvelist
Cvelist
•added 2025/09/24 4:17 p.m.•31 views

CVE-2025-10891

Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

0.0721EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2025/09/24 4:17 p.m.•23 views

CVE-2025-10890

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

9.1CVSS7.6AI score0.00307EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2025/09/24 4:17 p.m.•28 views

CVE-2025-10890

Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

9.1CVSS7.6AI score0.00307EPSS
SaveExploits0
CVE
CVE
•added 2025/09/24 4:17 p.m.•698 views

CVE-2025-10585

CVE-2025-10585 is a Type Confusion in Google Chrome’s V8 engine that can enable heap corruption via specially crafted HTML pages. Multiple connected sources confirm the vulnerability affects Chrome/Chromium (V8), with remote, no-user-interaction exploitation described in NVD/Chromium advisories a...

9.8CVSS8.3AI score0.05391EPSS
SaveIn wildExploits1References4Affected Software1
Cvelist
Cvelist
•added 2025/09/24 4:17 p.m.•140 views

CVE-2025-10585

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

0.05391EPSS
SaveExploits1References2
CNVD
CNVD
•added 2025/09/24 12:00 a.m.•43 views

Google Chrome V8 Type Obfuscation Vulnerability

Google Chrome is a web browser developed by Google, known for being fast, secure and personalized, with support for multi-device synchronization and smart tool integration. Google Chrome suffers from a type obfuscation vulnerability that stems from type obfuscation in V8, which can be exploited b...

9.8CVSS7.8AI score0.05391EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/09/24 12:00 a.m.•7 views

Google Chrome < 140.0.7339.207 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 140.0.7339.207. It is, therefore, affected by multiple vulnerabilities as referenced in the 202509stable-channel-update-for-desktop23 advisory. - Integer overflow in V8 in Google Chrome prior to 140.0.7339.207 allowed a...

9.1CVSS8.1AI score0.0721EPSS
SaveExploits0References7
FreeBSD
FreeBSD
•added 2025/09/23 12:00 a.m.•26 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 4 security fixes: 430336833 High CVE-2025-10890: Side-channel information leakage in V8. Reported by Mate Marjanović SharpEdged on 2025-07-09 443765373 High CVE-2025-10891: Integer overflow in V8. Reported by Google Big Sleep on 2025-09-09 444048019...

9.1CVSS7.8AI score0.0721EPSS
SaveExploits0References1
CISA KEV Catalog
CISA KEV Catalog
•added 2025/09/23 12:00 a.m.•168 views

Google Chromium V8 Type Confusion Vulnerability

Google Chromium contains a type confusion vulnerability in the V8 JavaScript and WebAssembly engine...

9.8CVSS7.3AI score0.05391EPSS
SaveIn wildExploits1
Vivaldi Security Advisories
Vivaldi Security Advisories
•added 2025/09/19 10:45 a.m.•28 views

Minor update(8) for Vivaldi Android Browser 7.5

Head to the Google Play Store and download the browser. Alternatively, you can download Vivaldi from Uptodown, the Android app store. Your rating for our browser matters. ⭐️ ⭐️ ⭐️ ⭐️ ⭐️ Enjoy! Changelog The following is a list of changes since the seventh 7.5 stable, minor update: Backported V8...

9.8CVSS7.3AI score0.05391EPSS
SaveExploits1References1
SUSE CVE
SUSE CVE
•added 2025/09/18 11:26 p.m.•8 views

SUSE CVE-2025-10585

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

9.8CVSS8.5AI score0.05391EPSS
SaveExploits1References3
Rows per page
Query Builder