Lucene search
+L

29530 matches found

Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-87508

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromiu...

4.3CVSS6AI score0.00272EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•4 views

CVE-2026-87508: Incorrect Authorization

Incorrect authorization in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00272EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•3 views

CVE-2026-87451: Exposure of Sensitive Information to an Unauthorized Actor

Information leak in Downloads in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

3.1CVSS5.2AI score0.0023EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•5 views

CVE-2026-87563: Origin Validation Error

Origin validation error in Paint in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00213EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•4 views

CVE-2026-87434: Missing Authorization

Missing authorization in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

3.1CVSS5.8AI score0.00244EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-87466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromi...

4.3CVSS5.8AI score0.00272EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-87447

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Network in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy v...

6.5CVSS6.5AI score0.0026EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•19 views

PT-2026-89172

Name of the Vulnerable Software and Affected Versions Open WebUI versions 0.8.11 through 0.11.0 Description An issue exists where the in-app port preview renders content in an iframe sandbox that simultaneously grants allow-scripts and allow-same-origin. Because the terminal proxy serves this...

8.7CVSS6.1AI score0.00417EPSS
SaveExploits1References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•4 views

CVE-2026-87611: Missing Authorization

Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. Chromium security severity: Medium...

3.1CVSS5.8AI score0.00222EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•6 views

CVE-2026-87498: Missing Authorization

Missing authorization in WebUI in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

3.1CVSS5.9AI score0.00244EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•13 views

Linux Distros Unpatched Vulnerability : CVE-2026-87452

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in GPU in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to potential...

3.1CVSS6.1AI score0.00222EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-87608

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin...

5.9AI score0.00259EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/09 12:00 a.m.•24 views

PT-2026-88617

Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 153.0.8010.36 Description A race condition in the mobile version of the browser allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or...

9.6CVSS6.4AI score0.00573EPSS
SaveExploits11References238
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-87517

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy v...

3.1CVSS6.1AI score0.00192EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•3 views

CVE-2026-87517: Time-of-check Time-of-use (TOCTOU) Race Condition

Race condition in Mobile in Google Chrome on on iOS prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. Chromium security severity: High...

3.1CVSS6AI score0.00192EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•3 views

CVE-2026-87642: Use of Uninitialized Resource

Uninitialized resource in WebGL in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.3AI score0.00282EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-87531

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Information leak in CORS in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data...

3.1CVSS5.6AI score0.0023EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-87571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Improper certificate validation in Loader in Google Chrome prior to 153.0.8010.36 allowed a remote attacker leveraging social engineering to bypass web origin...

5.4CVSS6AI score0.00162EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•4 views

CVE-2026-87622: Missing Authorization

Missing authorization in FedCM in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.8AI score0.00272EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•16 views

Linux Distros Unpatched Vulnerability : CVE-2026-87611

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing authorization in FileSystem in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to obtain...

3.1CVSS5.8AI score0.00222EPSS
SaveExploits0References2
Rows per page
Query Builder