Lucene search
K

32 matches found

SUSE CVE
SUSE CVE
added 3 days ago3 views

SUSE CVE-2026-11254

Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.00017EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 3 days ago4 views

SUSE CVE-2026-11309

Insufficient policy enforcement in History in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.00015EPSS
Exploits0References2
EUVD
EUVD
added 5 days ago6 views

EUVD-2026-34433

Inappropriate implementation in Accessibility in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: High...

5.8AI score0.00058EPSS
Exploits0References3
OSV
OSV
added 5 days ago3 views

DEBIAN-CVE-2026-11300

Inappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

4.3CVSS5.5AI score0.0002EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 6 days ago6 views

CVE-2026-11286

Insufficient validation of untrusted input in Wallet in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.5AI score0.00022EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 6 days ago5 views

CVE-2026-11232

Inappropriate implementation in TabGroups in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to perform UI spoofing via malicious network traffic. Chromium security severity: Low...

5.8AI score0.00057EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 6 days ago8 views

PT-2026-46513

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 149.0.7827.53 Description An inappropriate implementation in the Accessibility component allows a remote attacker to perform UI spoofing via a crafted HTML page. UI spoofing is a technique where an...

9.6CVSS5.8AI score0.04468EPSS
Exploits0References433
CNNVD
CNNVD
added 2026/05/27 12:0 a.m.5 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.216 contained a resource management vulnerability. This vulnerability stemmed from the reuse of Input components after they were released, potentially allowing remote attackers to exploit certain...

7.5CVSS5.8AI score0.00118EPSS
Exploits0References3
EUVD
EUVD
added 2026/05/06 9:31 p.m.2 views

EUVD-2026-28133

Inappropriate implementation in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS5.8AI score0.00079EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/02/21 1:28 a.m.4 views

CVE-2026-27476

RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted hex-encoded payloads containing system commands to execute arbitrary operations on the targe...

9.8CVSS6.1AI score0.00389EPSS
Exploits1References1
NVD
NVD
added 2026/02/19 9:18 p.m.4 views

CVE-2026-27476

RustFly 2.0.0 contains a command injection vulnerability in its remote UI control mechanism that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted hex-encoded payloads containing system commands to execute arbitrary operations on the targe...

9.8CVSS0.00389EPSS
Exploits1References2
CVE
CVE
added 2026/02/19 8:43 p.m.26 views

CVE-2026-27476

RustFly 2.0.0 is affected by a command-injection vulnerability in its remote UI control that accepts hex-encoded instructions over UDP port 5005 without proper sanitization. The flaw allows an attacker to send crafted hex payloads to execute arbitrary commands on the target, potentially enabling ...

9.8CVSS6.2AI score0.00389EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/02/19 12:0 a.m.4 views

PT-2026-20937

Name of the Vulnerable Software and Affected Versions RustFly version 2.0.0 Description RustFly 2.0.0 contains a command injection issue in its remote UI control mechanism. The software accepts hex-encoded instructions over UDP port 5005 without proper sanitization. Attackers can send crafted...

9.8CVSS6AI score0.00389EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2026/02/11 6:8 p.m.1 views

CVE-2026-2323

Inappropriate implementation in Downloads in Google Chrome prior to 145.0.7632.45 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.6AI score0.00011EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/14 2:29 a.m.2 views

CVE-2024-7021

Inappropriate implementation in Autofill in Google Chrome on Windows prior to 124.0.6367.60 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

6.1AI score0.00062EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2025/05/29 2:12 a.m.3 views

SUSE CVE-2025-5067

Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. Chromium security severity: Low...

5.4CVSS6.5AI score0.00054EPSS
Exploits0References3
CNNVD
CNNVD
added 2024/10/15 12:0 a.m.2 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in versions prior to Google Chrome 130.0.6723.58, which can be exploited by remote attackers to perform UI spoofing via a crafted Chrome extension...

4.3CVSS6.5AI score0.00129EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:51 a.m.3 views

SUSE CVE-2017-5079

Inappropriate implementation in Blink in Google Chrome prior to 59.0.3071.86 for Mac, Windows, and Linux, and 59.0.3071.92 for Android, allowed a remote attacker to display UI on a non attacker controlled tab via a crafted HTML page...

4.3CVSS8.6AI score0.00667EPSS
Exploits0References5
CNNVD
CNNVD
added 2023/01/02 12:0 a.m.2 views

Google Chrome 竞争条件问题漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome prior to version 104.0.5112.79 suffers from a Competitive Condition Issue vulnerability that stems from the presence of post-release reuse in Exosphere, which allows remote attackers to convince a user to engage ...

8.8CVSS8AI score0.00303EPSS
Exploits1References3
OSV
OSV
added 2022/06/20 7:27 a.m.5 views

MAL-2022-5747 Malicious code in remote-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2fcb162e726d16a6a879f1638e37d2ff333ad217f5c75decb034d9b8330a9167 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Rows per page
Query Builder