Lucene search
K

1288 matches found

Nuclei
Nuclei
added 16 hours ago91 views

Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage

Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. id: CVE-2015-2080 info: name: Eclipse Jetty 9.2.9.v20150224 - Sensitive Information Leakage author: pikpikcu severity: high description: Eclip...

7.5CVSS7.2AI score0.91897EPSS
Exploits16References5
NVD
NVD
added 6 days ago4 views

CVE-2026-10018

Integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.00028EPSS
Exploits0References2
OSV
OSV
added 6 days ago6 views

DEBIAN-CVE-2026-10008

Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.8AI score0.00028EPSS
Exploits0References1
OSV
OSV
added 6 days ago3 views

UBUNTU-CVE-2026-9981

Inappropriate implementation in Skia in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.8AI score0.00028EPSS
Exploits0References4
Debian CVE
Debian CVE
added 6 days ago6 views

CVE-2026-10008

Uninitialized Use in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

6.5CVSS5.8AI score0.00028EPSS
Exploits0
CVE
CVE
added 6 days ago16 views

CVE-2026-9996

CVE-2026-9996 affects Google Chrome on macOS, with an out-of-bounds read in WebRTC that could allow a remote, crafted HTML page to read potentially sensitive data from the browser process memory. Affected component: WebRTC in Chromium-based Chrome; root cause is an out-of-bounds read. Version det...

6.5CVSS5.8AI score0.00025EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 6 days ago24 views

CVE-2026-9985

Insufficient validation of untrusted input in Media in Google Chrome on ChromeOS prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

0.00037EPSS
Exploits0References2
CVE
CVE
added 6 days ago6 views

CVE-2026-9985

The CVE-2026-9985 entry affects Google Chrome on ChromeOS, leveraging the Media component in Chromium. The root cause is insufficient validation of untrusted input within Media, allowing a remote attacker that already compromised the renderer process to read potentially sensitive memory contents ...

5.3CVSS5.8AI score0.00037EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 6 days ago3 views

CVE-2026-9953

Out of bounds read in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00033EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2026/05/20 7:12 p.m.3 views

CVE-2026-9122

Out of bounds read in GPU in Google Chrome on Mac prior to 148.0.7778.179 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score0.0003EPSS
Exploits0
CVE
CVE
added 2026/05/14 7:52 p.m.9 views

CVE-2026-8543

CVE-2026-8543 describes an out-of-bounds read in the FileSystem component of Google Chrome on macOS. The issue exists before Chrome 148.0.7778.168 and can be triggered when a user is convinced to perform specific UI gestures on a crafted HTML page, potentially allowing access to sensitive data fr...

5.3CVSS5.8AI score0.0003EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2026/05/14 7:52 p.m.5 views

CVE-2026-8541

Out of bounds read in UI in Google Chrome prior to 148.0.7778.168 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

5.8AI score0.0003EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2026/05/12 8:21 p.m.4 views

CVE-2026-28940

The issue was addressed with improved memory handling. This issue is fixed in iOS 18.7.9 and iPadOS 18.7.9, iOS 26.5 and iPadOS 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, visionOS 26.5. Processing a maliciously crafted image may corrupt process memory...

8.8CVSS5.8AI score0.00046EPSS
Exploits0References1
EUVD
EUVD
added 2026/05/11 9:31 p.m.4 views

EUVD-2026-29306

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory...

6AI score0.00059EPSS
Exploits0References5
NVD
NVD
added 2026/05/11 9:19 p.m.6 views

CVE-2026-43661

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 26.5 and iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, watchOS 26.5. Processing a maliciously crafted image may corrupt process memory...

7.5CVSS0.00059EPSS
Exploits0References4
CVE
CVE
added 2026/05/11 8:8 p.m.8 views

CVE-2026-43661

CVE-2026-43661 affects Apple platforms including iOS 26.5/iPadOS 26.5, macOS Tahoe 26.5, tvOS 26.5, and watchOS 26.5. Description: Processing a maliciously crafted image may cause memory corruption due to a buffer overflow in ImageIO; impact is memory corruption with potential for crashes. The vu...

7.5CVSS6AI score0.00059EPSS
Exploits0References4Affected Software5
OSV
OSV
added 2026/05/08 3:16 p.m.3 views

UBUNTU-CVE-2026-43433

In the Linux kernel, the following vulnerability has been resolved: rustbinder: avoid reading the written value in offsets array When sending a transaction, its offsets array is first copied into the target proc's vma, and then the values are read back from there. This is normally fine because th...

7.8CVSS5.7AI score0.00012EPSS
Exploits0References6
EUVD
EUVD
added 2026/05/06 9:31 p.m.2 views

EUVD-2026-28023

Race in Speech in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.8AI score0.00032EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/05/05 12:0 a.m.3 views

PT-2026-38117

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description An uninitialized use in Dawn allows a remote attacker to obtain potentially sensitive information from process memory by using a crafted HTML page. Recommendations Update to version...

9.6CVSS5.8AI score0.00148EPSS
Exploits0References139
Positive Technologies
Positive Technologies
added 2026/05/05 12:0 a.m.5 views

PT-2026-38153

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 148.0.7778.96 Description A race condition in the Speech component allows a remote attacker who has already compromised the renderer process to obtain potentially sensitive information from process memory by usi...

9.6CVSS5.8AI score0.00148EPSS
Exploits0References135
Rows per page
Query Builder