Lucene search
K

96 matches found

RedhatCVE
RedhatCVE
added 3 days ago5 views

CVE-2026-12025

The following flaw was identified in the Chromium browser: Insufficient validation of untrusted input Network. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517153191...

5.8CVSS5.8AI score0.00227EPSS
Exploits0References5
OSV
OSV
added 2026/06/11 10:16 p.m.3 views

DEBIAN-CVE-2026-12025

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

5.3CVSS5.4AI score0.00227EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2026/06/05 2:0 p.m.7 views

Chromium: CVE-2026-11016 Insufficient validation of untrusted input in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS5.4AI score0.0028EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/06/05 12:0 a.m.7 views

Linux Distros Unpatched Vulnerability : CVE-2026-10926

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in Cast in Google Chrome prior to 149.0.7827.53 allowed an attacker on the local network segment to execute arbitrary code via malicious network...

8.8CVSS6.1AI score0.00187EPSS
Exploits0References2
OSV
OSV
added 2026/06/04 11:17 p.m.3 views

DEBIAN-CVE-2026-11016

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.0028EPSS
Exploits0References1
NVD
NVD
added 2026/06/04 11:17 p.m.4 views

CVE-2026-11013

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00308EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/06/04 11:5 p.m.4 views

CVE-2026-11223

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

5.8AI score0.00176EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/06/04 11:5 p.m.12 views

CVE-2026-11223

CVE-2026-11223 describes insufficient validation of untrusted input in Google Chrome’s Network component prior to 149.0.7827.53. A remote attacker who has compromised the renderer process could bypass the same-origin policy via a crafted HTML page. The root cause is insufficient input validation ...

6.5CVSS5.8AI score0.00176EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/06/04 11:5 p.m.28 views

CVE-2026-11223

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...

0.00176EPSS
Exploits0References2
EUVD
EUVD
added 2026/05/29 1:24 p.m.12 views

EUVD-2026-33314

mouse07410/asn1c is an ASN.1 compiler. In 1.4 and earlier, a memory safety vulnerability was identified in the OER decoding skeleton files generated by asn1c specifically INTEGERoer.c. When parsing a maliciously crafted, zero-length OER payload for a variable-length, non-negative INTEGER type, th...

8.2CVSS5.9AI score0.00197EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/26 12:0 a.m.5 views

CVE-2026-48689

FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamicbinarybuffert class src/dynamicbinarybuffer.hpp. Five methods appenddynamicbuffer, appenddataaspointer, appenddataasobjectptr, memcpyfromptr, memcpyfromobjectptr use an incorrect bounds chec...

9.8CVSS6.5AI score0.00677EPSS
Exploits1References4
Debian CVE
Debian CVE
added 2026/05/26 12:0 a.m.8 views

CVE-2026-48689

FastNetMon Community Edition through 1.2.9 contains an off-by-one heap-based buffer overflow in the dynamicbinarybuffert class src/dynamicbinarybuffer.hpp. Five methods appenddynamicbuffer, appenddataaspointer, appenddataasobjectptr, memcpyfromptr, memcpyfromobjectptr use an incorrect bounds chec...

9.8CVSS6.5AI score0.00677EPSS
Exploits1
Microsoft CVE
Microsoft CVE
added 2026/05/07 2:0 p.m.8 views

Chromium: CVE-2026-7947 Insufficient validation of untrusted input in Network

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.2CVSS5.8AI score0.00186EPSS
Exploits0
Vulnrichment
Vulnrichment
added 2026/05/06 6:12 p.m.7 views

CVE-2026-7947

Insufficient validation of untrusted input in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00186EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/05/06 6:12 p.m.23 views

CVE-2026-7947

Insufficient validation of untrusted input in Network in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

0.00186EPSS
Exploits0References2
CVE
CVE
added 2026/05/06 6:12 p.m.11 views

CVE-2026-7947

CVE-2026-7947 affects Google Chrome prior to 148.0.7778.96. The issue is insufficient validation of untrusted input in Chrome’s Network component, enabling a renderer-compromised remote attacker to spoof UI via a crafted HTML page. Impact is UI spoofing with low confidentiality/integrity/availabi...

4.2CVSS5.8AI score0.00186EPSS
Exploits0References2Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2026/01/21 12:0 a.m.8 views

Swift W3C TraceContext vulnerable to a malformed HTTP header causing a crash

A denial-of-service vulnerability due to improper input validation allows a remote attacker to crash the service via a malformed HTTP header. Allows crashing the process with data coming from the network when used with, for example, an HTTP server. Most common way of using Swift W3C Trace Context...

5.3CVSS5.6AI score0.00392EPSS
Exploits0References7Affected Software1
GithubExploit
GithubExploit
added 2026/01/13 9:59 p.m.138 views

Buffer-Overflow-Shellcode-Exploitation

Buffer Overflow & Shellcode Exploitation Overview This pr...

8.4AI score
Exploits0
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2025-24855

Malicious code in bioql PyPI...

8.6CVSS6.6AI score0.00701EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-26166

Malicious code in bioql PyPI...

9.8CVSS6.6AI score0.00499EPSS
Exploits0References1
Rows per page
Query Builder