Lucene search
+L

3175 matches found

NVD
NVD
•added 2026/05/14 8:17 p.m.•25 views

CVE-2026-8566

Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS0.00243EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/14 8:17 p.m.•24 views

CVE-2026-8520

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS0.00226EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/05/14 8:17 p.m.•16 views

CVE-2026-8520

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS8.2AI score0.00226EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2026/05/14 8:17 p.m.•20 views

CVE-2026-8566

Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.8AI score0.00243EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/14 7:52 p.m.•109 views

CVE-2026-8566

A vulnerability in Google Chrome on Android prior to version 148.0.7778.168 allows a remote attacker to bypass discretionary access control . The root cause is insufficient policy enforcement within the Payments component, which can be triggered by a crafted HTML page. The vulnerability has a Med...

4.3CVSS5.8AI score0.00243EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/14 7:52 p.m.•15 views

CVE-2026-8566

Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00243EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/14 7:52 p.m.•28 views

CVE-2026-8566

Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00243EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
•added 2026/05/14 7:52 p.m.•25 views

EUVD-2026-30383

Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00243EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/05/14 7:52 p.m.•30 views

CVE-2026-8566

Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.8AI score0.00243EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/05/14 7:52 p.m.•67 views

CVE-2026-8566

Insufficient policy enforcement in Payments in Google Chrome on Android prior to 148.0.7778.168 allowed a remote attacker to bypass discretionary access control via a crafted HTML page. Chromium security severity: Medium...

0.00243EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/14 7:52 p.m.•16 views

CVE-2026-8520

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS8.3AI score0.00226EPSS
SaveExploits0References3Affected Software1
CVE
CVE
•added 2026/05/14 7:52 p.m.•78 views

CVE-2026-8520

Google Chrome versions prior to 148.0.7778.168 are vulnerable to a race condition in the Payments component. This flaw stems from synchronization errors when accessing a common resource, which could allow a remote attacker to achieve a sandbox escape by navigating to a crafted HTML page . This is...

8.3CVSS8.3AI score0.00226EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
•added 2026/05/14 7:52 p.m.•10 views

CVE-2026-8520

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3AI score0.00226EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/05/14 7:52 p.m.•27 views

CVE-2026-8520

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS8.3AI score0.00226EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/05/14 7:52 p.m.•60 views

CVE-2026-8520

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

0.00226EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/14 12:00 a.m.•17 views

PT-2026-41095

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 148.0.7778.168 Description Insufficient policy enforcement in Payments allows a remote attacker to bypass discretionary access control, which is a mechanism that restricts access to objects based on t...

9.6CVSS6.5AI score0.00573EPSS
SaveExploits1References388
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/14 12:00 a.m.•2 views

CVE-2026-8520: Concurrent Execution using Shared Resource with Improper Synchronization

Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Critical...

8.3CVSS8.3AI score0.00226EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/05/14 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2026-8520

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Race in Payments in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium...

8.3CVSS8AI score0.00226EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/05/12 12:00 a.m.•21 views

PT-2026-41049

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.168 Description A race condition in the Payments component allows a remote attacker to potentially achieve a sandbox escape by using a specially crafted HTML page. A sandbox escape is a technique used...

9.6CVSS6.9AI score0.00573EPSS
SaveExploits1References399
Kaspersky
Kaspersky
•added 2026/05/12 12:00 a.m.•131 views

KLA91044 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Denial of...

9.6CVSS7.7AI score0.0995EPSS
SaveExploits0References3
Rows per page
Query Builder