CVE-2025-4664

🔒 漏洞 CVE-2025-4664 CVE-2025-4664 漏洞是 Google Chrome Loader 组件中识别出的一个高严重性安全缺陷，存在于 136.0.7103.113 之前的版本中。该问题允许远程攻击者通过特制的 HTML 页面泄露跨源数据，从而可能危及会话令牌或身份验证凭据等敏感信息。 ❓ 该漏洞是什么？ 该缺陷源于 Chrome Loader 组件中安全策略的不当实现。具体而言，Chrome 会在子资源（如图像或脚本）请求中解析 HTTP Link 头中的 referrer-policy...

SUSE CVE-2026-84359

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

EUVD-2026-69731

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-84359

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2026-84359

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-84359

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-84359

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-84359

CVE-2026-84359 is an information leak in the Skia rendering library within Google Chrome prior to 152.0.7977.75 . A remote attacker who had already compromised the renderer process could exploit a crafted HTML page to leak cross-origin data , bypassing same-origin isolation. The vulnerability was...

PT-2026-84569

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

CVE-2026-82287

Rybbit before 2.7.0 contains a CORS misconfiguration in its server that reflects any request origin in the Access-Control-Allow-Origin response header while credentials remain enabled. This allows an attacker on any website to issue credentialed cross-origin requests against a victim's session, r...

CVE-2026-79258

A flaw was found in WebXR within Google Chrome. This incorrect authorization vulnerability allows a remote attacker, by leveraging social engineering tactics and a specially crafted HTML page, to obtain sensitive cross-origin data. This could lead to unauthorized information disclosure...

CVE-2026-79146

A flaw was found in CustomTabs in Google Chrome. A local attacker could exploit this vulnerability through a co-installed application. This could result in an information leak, allowing the attacker to access cross-origin data...

CVE-2026-78958

A flaw was found in Skia, a 2D graphics library used in Chromium-based browsers. A remote attacker, after compromising the renderer process, could exploit an uninitialized resource vulnerability by crafting a malicious HTML page. This could potentially allow the attacker to obtain sensitive...

CVE-2026-78896

A flaw was found in Google Chrome. This vulnerability, located in the StorageAccessAPI, allows a remote attacker to exploit it by crafting a malicious HTML page. Successful exploitation could lead to an information leak, enabling the attacker to obtain sensitive cross-origin data...

CVE-2026-79272

A flaw was found in Google Chrome's FindInPage component. This improper input validation vulnerability could allow a remote attacker, who has compromised the browser's renderer process, to leak sensitive cross-origin data. The attacker could achieve this by tricking a user into visiting a special...

CVE-2026-79016

A flaw was found in Google Chrome. A remote attacker could exploit an observable discrepancy in how Scalable Vector Graphics SVG are handled by crafting a malicious HTML page. This vulnerability allows the attacker to obtain sensitive cross-origin data, potentially leading to information disclosu...

CVE-2026-78986

A flaw was found in Chromium. A remote attacker, after compromising the renderer process, could exploit an uninitialized resource in the Graphics Processing Unit GPU by crafting a malicious HTML page. This could potentially lead to the disclosure of sensitive cross-origin data...

CVE-2026-78960

A flaw was found in Chromium. A remote attacker, leveraging social engineering, could exploit an information leak in Extensions. This vulnerability allows the attacker to obtain cross-origin data by using a specially crafted Chrome extension...

CVE-2026-78962

A flaw was found in WebXR in Google Chrome. An uninitialized resource vulnerability could allow a remote attacker, leveraging social engineering and a crafted HTML page, to potentially leak sensitive cross-origin data. This could expose confidential information from other websites...

CVE-2026-78955

A flaw was found in Google Chrome. An observable discrepancy in the PerformanceAPIs allows a remote attacker to potentially obtain sensitive cross-origin data. This vulnerability can be exploited by enticing a user to visit a specially crafted HTML page, leading to unauthorized information...