Lucene search
K

33 matches found

SUSE CVE
SUSE CVE
added 2026/06/07 4:40 a.m.8 views

SUSE CVE-2026-11254

Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.00176EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2026/06/07 4:38 a.m.10 views

SUSE CVE-2026-11309

Insufficient policy enforcement in History in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.00132EPSS
Exploits0References2
EUVD
EUVD
added 2026/06/05 12:31 a.m.10 views

EUVD-2026-34433

Inappropriate implementation in Accessibility in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00233EPSS
Exploits0References3
OSV
OSV
added 2026/06/05 12:17 a.m.5 views

DEBIAN-CVE-2026-11300

Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.00154EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/06/04 11:6 p.m.7 views

CVE-2026-11286

Insufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.5AI score0.00154EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/06/04 11:5 p.m.6 views

CVE-2026-11232

Inappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

5.8AI score0.00146EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/06/04 12:0 a.m.17 views

PT-2026-46513

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description An inappropriate implementation in the Accessibility component allows a remote attacker to perform UI spoofing via a crafted HTML page. UI spoofing is a technique where an...

9.6CVSS5.8AI score0.00493EPSS
Exploits0References437
CNNVD
CNNVD
added 2026/06/02 12:0 a.m.6 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 contained a security vulnerability, which was caused by improper implementation of the Payments component. This vulnerability could allow remote attackers to execute UI spoofing through...

6.5CVSS5.6AI score0.00217EPSS
Exploits0References3
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.7 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the reuse of Input components after they were released, potentially allowing remote attackers to exploit certain...

7.5CVSS5.8AI score0.00222EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/06 9:31 p.m.5 views

EUVD-2026-28133

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.8AI score0.00159EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/02/21 1:28 a.m.7 views

CVE-2026-27476

RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted hex-encoded payloads containing system commands to execute arbitrary operations on the targe...

9.8CVSS6.1AI score0.02628EPSS
Exploits1References1
NVD
NVD
added 2026/02/19 9:18 p.m.6 views

CVE-2026-27476

RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted hex-encoded payloads containing system commands to execute arbitrary operations on the targe...

9.8CVSS0.02628EPSS
Exploits1References2
CVE
CVE
added 2026/02/19 8:43 p.m.32 views

CVE-2026-27476

RustFly 2.0.0 is affected by a command-injection vulnerability in its remote UI control that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. The flaw allows an attacker to send crafted hex payloads to execute arbitrary commands on the target, potentially enabling ...

9.8CVSS6.2AI score0.02628EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.8 views

PT-2026-20937

Name of the Vulnerable Software and Affected Versions RustFly version 2.0.0 Description RustFly 2.0.0 contains a command injection issue in its remote UI control mechanism. The software accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted...

9.8CVSS6AI score0.02628EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/02/11 6:8 p.m.4 views

CVE-2026-2323

Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.6AI score0.00223EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/14 2:29 a.m.4 views

CVE-2024-7021

Inappropriate implementation in Autofill in Google Chrome on Windows prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.1AI score0.00171EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/05/29 2:12 a.m.5 views

SUSE CVE-2025-5067

Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS6.5AI score0.00349EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/15 12:0 a.m.4 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 130.0.6723.58, which can be exploited by remote attackers to perform UI spoofing via a crafted Chrome extension...

4.3CVSS6.5AI score0.00257EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:51 a.m.5 views

SUSE CVE-2017-5079

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...

4.3CVSS8.6AI score0.01353EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/01/02 12:0 a.m.3 views

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome prior to version 104.0.5112.79 suffers from a Competitive Condition Issue vulnerability that stems from the presence of post-release reuse in Exosphere, which allows remote attackers to convince a user to engage ...

8.8CVSS8AI score0.00395EPSS
Exploits1References3
Rows per page
Query Builder