33 matches found
CVE-2025-4664
🔒 漏洞 CVE-2025-4664 CVE-2025-4664 漏洞是 Google Chrome Loader 组件中识别出的一个高严重性安全缺陷，存在于 136.0.7103.113 之前的版本中。该问题允许远程攻击者通过特制的 HTML 页面泄露跨源数据，从而可能危及会话令牌或身份验证凭据等敏感信息。 ❓ 该漏洞是什么？ 该缺陷源于 Chrome Loader 组件中安全策略的不当实现。具体而言，Chrome 会在子资源（如图像或脚本）请求中解析 HTTP Link 头中的 referrer-policy...
CVE-2026-87508
A flaw was found in the Loader component of Google Chrome. This incorrect authorization vulnerability allows a remote attacker to bypass the web origin policy by enticing a user to visit a specially crafted HTML page. This could lead to unauthorized access to sensitive information or actions acro...
CVE-2026-87571
Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. Chromium security severity: Low...
DEBIAN-CVE-2026-87476
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87476
An incorrect authorization flaw was found in the Loader component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=506390077...
CVE-2026-87508
Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-87508
CVE-2026-87508 is an incorrect authorization flaw in the Loader component of Google Chrome , affecting versions prior to 153.0.8010.36 . A remote attacker can leverage a crafted HTML page to bypass the web origin policy , resulting in limited confidentiality impact. The vulnerability requires use...
CVE-2026-78942
A flaw was found in the Loader component of Google Chrome. This vulnerability, caused by incorrect reference resolution, allows a remote attacker to bypass the web origin policy by sending specially crafted network traffic. Bypassing the web origin policy can lead to unauthorized access to...
CVE-2026-79051
A flaw was found in Google Chrome. Incorrect authorization within the Loader component allows a remote attacker to bypass the web origin policy. This can be exploited by enticing a user to visit a specially crafted HTML page...
CVE-2026-79051
CVE-2026-79051 is an incorrect authorization vulnerability in the Loader component of Google Chrome prior to 152.0.7977.65 . A remote attacker can exploit it by enticing a user to visit a crafted HTML page , resulting in a web origin policy bypass . The CVSS 3.1 base score is 4.3 (Medium) , with ...
CVE-2026-17783
An inappropriate implementation flaw was found in the Loader component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513532735...
CVE-2026-17661
An use after free flaw was found in the Loader component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497451790...
CVE-2026-17664
An insufficient validation of untrusted input flaw was found in the Loader component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500554346...
CVE-2026-11240
An insufficient validation of untrusted input flaw was found in the Loader component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497030032...
Google Chrome 输入验证错误漏洞
Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a vulnerability related to input validation, which stems from insufficient trustworthiness in input validation provided by the Loader component...
ROS-20260122-73-0021
A vulnerability in the Loader component of Google Chrome browser is related to incorrect data type conversion. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service using a specially crafted HTML page...
PT-2026-21332
Name of the Vulnerable Software and Affected Versions GIMP versions prior to 3.0.8-5 Description A heap-buffer-overflow exists when processing specially crafted PSD Photoshop Document files. The issue occurs within the fread pascal string function because the buffer allocated for a Pascal string ...
Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of Secrets
The second wave of the Shai-Hulud supply chain attack has spilled over to the Maven ecosystem after compromising more than 830 packages in the npm registry. The Socket Research Team said it identified a Maven Central package named org.mvnpm:posthog-node:4.18.1 that embeds the same two components...
ROS-20251008-03
A vulnerability in the Loader component of Google Chrome browsers is related to bypassing the authentication procedure by using an alternate path or channel. Exploitation of the vulnerability could allow an attacker acting remotely to bypass security restrictions...
