Lucene search
+L

203 matches found

NVD
NVD
•added 2026/07/08 9:16 a.m.•26 views

CVE-2026-57244

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash...

7.8CVSS0.0017EPSS
SaveExploits0References1
NVD
NVD
•added 2026/07/08 9:16 a.m.•20 views

CVE-2026-57242

The application opens the PDF, and JavaScript modifies the form. However, the related objects on the page lack complete lifecycle management and null value validation; when the page state changes, the application continuously dereferences invalid objects, eventually leading to a crash...

7.8CVSS0.0017EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/07/08 7:36 a.m.•11 views

CVE-2026-57244

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash...

7.8CVSS5.9AI score0.0017EPSS
SaveExploits0References2Affected Software2
Positive Technologies
Positive Technologies
•added 2026/07/08 12:00 a.m.•27 views

PT-2026-56341

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description A use-after-free issue occurs when the application opens a PDF and JavaScript modifies the form. Due to incomplete lifecycle management and a lack of null value validation for...

7.8CVSS6.1AI score0.0017EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/07/08 12:00 a.m.•17 views

PT-2026-56343

After JavaScript resetting the form, the synchronization process lacks re-entry protection and object lifecycle verification, resulting in the failure of the control pointer during the traversal process. After the pointer fails, it still continues to dereference, causing the application to crash...

7.8CVSS5.9AI score0.0017EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/06/17 6:35 p.m.•24 views

EUVD-2026-37550

Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS8.1AI score0.00242EPSS
SaveExploits0References3
NVD
NVD
•added 2026/06/17 1:20 p.m.•21 views

CVE-2026-12465

Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.3CVSS0.00242EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/17 1:38 a.m.•93 views

CVE-2026-12465

A high-severity object lifecycle issue in the Metrics component of Google Chrome (and potentially Microsoft Edge ) prior to version 149.0.7827.155 allows a remote attacker who has already compromised the renderer process to perform a sandbox escape via a crafted HTML page. The vulnerability is al...

8.3CVSS8.1AI score0.00242EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/06/17 1:38 a.m.•50 views

CVE-2026-12465

Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

0.00242EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/17 1:38 a.m.•10 views

CVE-2026-12465

Object lifecycle issue in Metrics in Google Chrome prior to 149.0.7827.155 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

8.1AI score0.00242EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2026/06/16 2:14 a.m.•35 views

Chromium: CVE-2026-11689 Insufficient validation of untrusted input in Passwords

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.1CVSS7.4AI score0.00218EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2026/06/10 6:09 p.m.•18 views

CVE-2026-11688

An object lifecycle issue flaw was found in the SVG component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517309206...

8.8CVSS7.5AI score0.00256EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2026/06/08 12:00 a.m.•25 views

Google Chrome 代码注入漏洞

Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a code injection vulnerability, which stems from issues with the lifecycle of SVG objects...

8.8CVSS7.6AI score0.00256EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/06/07 5:03 a.m.•17 views

CVE-2026-11152

An object lifecycle issue flaw was found in the Dawn component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=501762953...

9.6CVSS7.9AI score0.00234EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/06/07 4:43 a.m.•22 views

SUSE CVE-2026-11152

Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS8.3AI score0.00234EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2026/06/05 2:00 p.m.•28 views

Chromium: CVE-2026-11152 Object lifecycle issue in Dawn

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

9.6CVSS8AI score0.00234EPSS
SaveExploits0
EUVD
EUVD
•added 2026/06/05 12:31 a.m.•19 views

EUVD-2026-34613

Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

8.3AI score0.00234EPSS
SaveExploits0References3
OSV
OSV
•added 2026/06/04 11:17 p.m.•15 views

DEBIAN-CVE-2026-11152

Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS8.3AI score0.00234EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/06/04 11:17 p.m.•12 views

CVE-2026-11152

Object lifecycle issue in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS8.3AI score0.00234EPSS
SaveExploits0References3
CVE
CVE
•added 2026/06/04 11:05 p.m.•74 views

CVE-2026-11152

A security vulnerability exists in the Dawn component of the Google Chrome and Microsoft Edge web browsers. The issue is caused by an object lifecycle problem, specifically involving the use of memory after it has been freed. A remote attacker could exploit this via a crafted HTML page to potenti...

9.6CVSS8.3AI score0.00234EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder