Lucene search
+L

232 matches found

Microsoft CVE
Microsoft CVE
•added 2025/03/07 4:00 p.m.•13 views

Chromium: CVE-2025-1921 Inappropriate Implementation in Media Stream

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS6.9AI score0.0033EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2025/03/06 3:03 a.m.•8 views

SUSE CVE-2025-1921

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.3AI score0.0033EPSS
SaveExploits0References5
OSV
OSV
•added 2025/03/05 4:15 a.m.•2 views

DEBIAN-CVE-2025-1921

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS7AI score0.0033EPSS
SaveExploits0References1
NVD
NVD
•added 2025/03/05 4:15 a.m.•15 views

CVE-2025-1921

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.0033EPSS
SaveExploits0References2
OSV
OSV
•added 2025/03/05 4:15 a.m.•16 views

CVE-2025-1921

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2025/03/05 3:48 a.m.•42 views

CVE-2025-1921

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

0.0033EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2025/03/05 3:48 a.m.•20 views

CVE-2025-1921

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS7AI score0.0033EPSS
SaveExploits0
CVE
CVE
•added 2025/03/05 3:48 a.m.•129 views

CVE-2025-1921

A vulnerability in the Media Stream component of Google Chrome prior to version 134.0.6998.35 allows a remote attacker to obtain information about a peripheral. The root cause is an inappropriate implementation within the Media Stream, which can be triggered by a crafted HTML page . The impact is...

6.5CVSS5.8AI score0.0033EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/03/05 12:00 a.m.•4 views

CVE-2025-1921: Exposure of Sensitive Information Through Metadata

Inappropriate implementation in Media Stream in Google Chrome prior to 134.0.6998.35 allowed a remote attacker to obtain information about a peripheral via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.6AI score0.0033EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/03/04 12:00 a.m.•7 views

PT-2025-9741 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 134.0.6998.35 Description: The issue is related to an inappropriate implementation in the Media Stream of Google Chrome, allowing a remote attacker to obtain information about a peripheral via a crafted HTML...

8.8CVSS5.3AI score0.00418EPSS
SaveExploits0References80
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2025/03/04 12:00 a.m.•77 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 134 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 134.0.6998.35 Linux 134.0.6998.35/36 Windows 134.0.6998.44/45 Mac contains a number of fixes and improvements -- a list of...

8.8CVSS6.8AI score0.00418EPSS
SaveExploits0Affected Software1
AstraLinux
AstraLinux
•added 2024/11/23 3:04 a.m.•15 views

Astra Linux – Vulnerability in Chromium

The use of “after free” in Media Stream in Google Chrome before version 126.0.6478.182 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

8.8CVSS8.4AI score0.00465EPSS
SaveExploits1References3
Snyk
Snyk
•added 2024/10/03 6:26 p.m.•8 views

Cross-site Scripting (XSS)

Overview sulu/sulu is a highly extensible open-source PHP content management system based on the Symfony framework. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the MediaStreamController's downloadAction method. An attacker can inject arbitrary code by...

6.1CVSS5.5AI score0.00394EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/08/09 12:00 a.m.•19 views

The vulnerability of the Media Stream component in browsers Google Chrome and Microsoft Edge allows a perpetrator to gain unauthorized access to protected information, execute arbitrary code, or cause a service failure.

The vulnerability of the Media Stream component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information, execute arbitrary code, or...

10CVSS7.8AI score0.00465EPSS
SaveExploits1References13Affected Software7
Tenable Nessus
Tenable Nessus
•added 2024/07/23 12:00 a.m.•30 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0212-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0212-1 advisory. Chromium 126.0.6478.182 boo1227979: - CVE-2024-6772: Inappropriate implementation in V8 - CVE-2024-6773: Type Confusion in V8 - CVE-2024-6774: Us...

9.6CVSS7.7AI score0.06265EPSS
SaveExploits10References18
Tenable Nessus
Tenable Nessus
•added 2024/07/23 12:00 a.m.•34 views

Google Chrome < 126.0.6367.182 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 126.0.6367.182. It is, therefore, affected by multiple vulnerabilities as referenced in the 202407stable-channel-update-for-desktop advisory. - Out of bounds memory access in V8 in Google Chrome prior to 126.0.6478.182...

9.6CVSS7.7AI score0.06265EPSS
SaveExploits10References17
OSV
OSV
•added 2024/07/22 9:12 a.m.•24 views

OPENSUSE-SU-2024:0212-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 126.0.6478.182 boo1227979: - CVE-2024-6772: Inappropriate implementation in V8 - CVE-2024-6773: Type Confusion in V8 - CVE-2024-6774: Use after free in Screen Capture - CVE-2024-6775: Use after free in Media Stream - CVE-2024-6776: Use...

9.6CVSS8.1AI score0.06265EPSS
SaveExploits10References10
OpenVAS
OpenVAS
•added 2024/07/22 12:00 a.m.•31 views

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities - Jul24

Microsoft Edge Chromium-Based is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

9.6CVSS7.9AI score0.06265EPSS
SaveExploits10References2
OpenVAS
OpenVAS
•added 2024/07/22 12:00 a.m.•26 views

Mageia: Security Advisory (MGASA-2024-0273)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.9AI score0.06265EPSS
SaveExploits10References4
Tenable Nessus
Tenable Nessus
•added 2024/07/21 12:00 a.m.•34 views

Fedora 40 : chromium (2024-2a56aeb66b)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-2a56aeb66b advisory. update to 126.0.6478.182 High CVE-2024-6772: Inappropriate implementation in V8 High CVE-2024-6773: Type Confusion in V8 High CVE-2024-6774: Use aft...

9.6CVSS7.7AI score0.06265EPSS
SaveExploits10References9
Rows per page
Query Builder