Lucene search
K

1330 matches found

NVD
NVD
added yesterday2 views

CVE-2022-26758

A malicious application may cause unexpected changes in memory shared between processes. A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.4...

7.1CVSS
Exploits0References2
Nuclei
Nuclei
added 3 days ago94 views

Eclipse Jetty <9.2.9.v20150224 - Sensitive Information Leakage

Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header. id: CVE-2015-2080 info: name: Eclipse Jetty 9.2.9.v20150224 - Sensitive Information Leakage author: pikpikcu severity: high description: Eclip...

7.5CVSS7.2AI score0.91392EPSS
Exploits16References5
EUVD
EUVD
added 6 days ago5 views

EUVD-2026-34699

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...

5.8AI score0.00019EPSS
Exploits0References3
EUVD
EUVD
added 6 days ago5 views

EUVD-2026-34443

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00036EPSS
Exploits0References3
NVD
NVD
added last week4 views

CVE-2026-11160

Out of bounds read in Input in Google Chrome on Linux prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS0.0003EPSS
Exploits0References2
OSV
OSV
added last week4 views

DEBIAN-CVE-2026-11143

Out of bounds read in Extensions in Google Chrome on Linux prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Medium...

6.5CVSS5.4AI score0.00016EPSS
Exploits0References1
OSV
OSV
added last week3 views

DEBIAN-CVE-2026-10994

Uninitialized Use in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.5AI score0.00036EPSS
Exploits0References1
NVD
NVD
added last week3 views

CVE-2026-10976

Uninitialized Use in Dawn in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

7.4CVSS0.00036EPSS
Exploits0References2
CVE
CVE
added last week13 views

CVE-2026-11250

CVE-2026-11250 concerns Google Chrome DevTools prior to version 149.0.7827.53. The issue is an inappropriate implementation in DevTools that allowed a remote attacker who had already compromised the renderer process to read potentially sensitive data from process memory via a crafted HTML page. P...

9.6CVSS5.8AI score0.00073EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added last week29 views

CVE-2026-11238

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...

0.00019EPSS
Exploits0References2
CVE
CVE
added last week15 views

CVE-2026-11238

CVE-2026-11238 concerns the Google Chrome DevTools implementation. The connected documents state that an insecure DevTools path in Chrome prior to version 149.0.7827.53 allows a user-assisted attack: if a user installs a malicious extension, memory contents from affected processes may be exposed....

5.9CVSS5.8AI score0.00019EPSS
Exploits0References2Affected Software1
Debian CVE
Debian CVE
added last week4 views

CVE-2026-11238

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...

5.9CVSS5.4AI score0.00019EPSS
Exploits0
Cvelist
Cvelist
added last week24 views

CVE-2026-11196

Type Confusion in XML in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted XML file. Chromium security severity: Medium...

0.0003EPSS
Exploits0References2
Cvelist
Cvelist
added last week22 views

CVE-2026-11013

Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

0.00069EPSS
Exploits0References2
CVE
CVE
added last week8 views

CVE-2026-10992

CVE-2026-10992 affects Google Chrome (Chromium-based) prior to 149.0.7827.53, where insufficient data validation in the Animation component may allow a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. The vulnerability is linked to the Chrom...

6.5CVSS5.8AI score0.00036EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added last week25 views

CVE-2026-10979

Out of bounds read in ANGLE in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: High...

0.00035EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/06/04 12:0 a.m.6 views

PT-2026-46670

Name of the Vulnerable Software and Affected Versions Google Chrome on Linux versions prior to 149.0.7827.53 Description An out of bounds read in Extensions allows an attacker to obtain potentially sensitive information from process memory. This occurs when a user is convinced to install a crafte...

9.6CVSS5.8AI score0.04819EPSS
Exploits0References433
Positive Technologies
Positive Technologies
added 2026/06/04 12:0 a.m.7 views

PT-2026-46765

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...

5.8AI score0.00019EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/06/04 12:0 a.m.5 views

PT-2026-46777

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...

5.8AI score0.00073EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/06/02 12:0 a.m.5 views

PT-2026-46695

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description An inappropriate implementation in Extensions allows a remote attacker who has compromised the renderer process to obtain potentially sensitive information from process memory by using ...

9.6CVSS5.8AI score0.04819EPSS
Exploits0References434
Rows per page
Query Builder