Lucene search
+L

19 matches found

Redos
Redos
•added 2026/07/16 12:00 a.m.•10 views

ROS-20260716-73-0017

The vulnerability of the PrivateAI component in Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...

9.6CVSS7AI score0.00345EPSS
SaveExploits0
AstraLinux
AstraLinux
•added 2026/06/24 3:11 p.m.•10 views

Astra Linux – Vulnerability in Chromium

The use of “after free” in PrivateAI in Google Chrome before version 147.0.7727.55 allowed a remote attacker who convinced a user to perform certain UI gestures to potentially execute a sandbox escape through a crafted HTML page. Chromium security severity: Medium...

9.6CVSS8.4AI score0.00345EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/05/05 12:00 a.m.•14 views

The vulnerability of PrivateAI’s browser component for Google Chrome allows a hacker to bypass the sandboxing protection mechanism.

The vulnerability of the PrivateAI component in Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass the sandboxing protection mechanisms...

10CVSS7.3AI score0.00345EPSS
SaveExploits0References8Affected Software4
OSV
OSV
•added 2026/04/12 8:14 p.m.•14 views

OPENSUSE-SU-2026:20575-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 147.0.7727.55 boo1261758: CVE-2026-5858: Heap buffer overflow in WebML CVE-2026-5859: Integer overflow in WebML CVE-2026-5860: Use after free in WebRTC CVE-2026-5861: Use after free in V8 CVE-2026-5862: Inappropriate implementation in ...

9.8CVSS7.1AI score0.00573EPSS
SaveExploits0References61
Microsoft CVE
Microsoft CVE
•added 2026/04/11 12:31 a.m.•14 views

Chromium: CVE-2026-5874 Use after free in PrivateAI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

9.6CVSS5.8AI score0.00345EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/04/09 11:30 p.m.•11 views

SUSE CVE-2026-5874

Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS7.3AI score0.00345EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/04/09 10:37 p.m.•12 views

CVE-2026-5874

A flaw was found in Google Chrome. A remote attacker could exploit a use-after-free vulnerability in the PrivateAI component by convincing a user to engage in specific user interface UI gestures through a crafted HTML page. This could potentially allow the attacker to bypass the browser's securit...

9.6CVSS5.9AI score0.00345EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/04/09 12:31 a.m.•13 views

EUVD-2026-20679

Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

5.9AI score0.00345EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/04/09 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-5874

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to...

9.6CVSS7.1AI score0.00345EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/08 10:16 p.m.•11 views

CVE-2026-5874

Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS0.00345EPSS
SaveExploits0References2
OSV
OSV
•added 2026/04/08 10:16 p.m.•10 views

DEBIAN-CVE-2026-5874

Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS8.4AI score0.00345EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/04/08 10:16 p.m.•14 views

CVE-2026-5874

Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS5.8AI score0.00345EPSS
SaveExploits0References3
CVE
CVE
•added 2026/04/08 9:20 p.m.•68 views

CVE-2026-5874

Google Chrome versions prior to 147.0.7727.55 are vulnerable to a use after free flaw in the PrivateAI component. This resource management error allows a remote attacker to potentially achieve a sandbox escape by tricking a user into performing specific UI gestures while interacting with a crafte...

9.6CVSS5.9AI score0.00345EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/04/08 9:20 p.m.•14 views

CVE-2026-5874

Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS8.4AI score0.00345EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/04/08 9:20 p.m.•5 views

CVE-2026-5874

Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00345EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/04/08 9:20 p.m.•8 views

CVE-2026-5874

Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

5.9AI score0.00345EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2026/04/08 9:20 p.m.•49 views

CVE-2026-5874

Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

0.00345EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/08 12:00 a.m.•0 views

CVE-2026-5874: Use After Free

Use after free in PrivateAI in Google Chrome prior to 147.0.7727.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

9.6CVSS8.6AI score0.00345EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/04/07 12:00 a.m.•20 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 147.0.7727.55 contained a resource management vulnerability. This vulnerability stemmed from PrivateAI’s ability to release and reuse resources, which could lead to sandbox escape through specially crafted...

9.6CVSS7.3AI score0.00345EPSS
SaveExploits0References3
Rows per page
Query Builder