Lucene search
+L

1879 matches found

CVE
CVE
added 2026/09/01 11:42 p.m.23 views

CVE-2026-84355

CVE-2026-84355 is an incorrect authorization vulnerability in the Navigation component of Google Chrome prior to 152.0.7977.75 . A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to bypass the web origin policy . The Chromium project rates this ...

3.1CVSS5.9AI score0.00175EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/01 11:42 p.m.29 views

CVE-2026-84355

Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

0.00175EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/01 11:42 p.m.31 views

CVE-2026-84323

CVE-2026-84323 is a missing authorization flaw in the FileSystem component of Google Chrome prior to 152.0.7977.75 (and 152.0.7977.76 on Windows/Mac). A remote attacker who had already compromised the renderer process could leverage social engineering to obtain sensitive information via a crafted...

5.3CVSS5.9AI score0.00164EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/01 11:42 p.m.6 views

CVE-2026-84355

Incorrect authorization in Navigation in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

3.1CVSS5.9AI score0.00175EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2026/09/01 11:42 p.m.4 views

CVE-2026-84358

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

4.2CVSS5.9AI score0.00156EPSS
SaveExploits0
CVE
CVE
added 2026/09/01 11:42 p.m.23 views

CVE-2026-84358

CVE-2026-84358 is a Medium -severity improper privilege management flaw in the Downloads component of Google Chrome prior to 152.0.7977.75 . A remote attacker who had already compromised the renderer process could use a crafted HTML page to spoof the address bar , potentially misleading users int...

4.2CVSS5.9AI score0.00156EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/01 11:42 p.m.25 views

CVE-2026-84323

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

0.00164EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/01 11:42 p.m.26 views

CVE-2026-84358

Improper privilege management in Downloads in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to spoof address bar via a crafted HTML page. Chromium security severity: Medium...

0.00156EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/01 11:42 p.m.7 views

CVE-2026-84323

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.9AI score0.00164EPSS
SaveExploits0
CVE
CVE
added 2026/09/01 11:42 p.m.21 views

CVE-2026-84328

CVE-2026-84328 is a missing authorization vulnerability in the FileSystem component of Google Chrome prior to version 152.0.7977.75 . A remote attacker with a compromised renderer process could leverage a crafted HTML page to bypass the web origin policy . The vulnerability was reported by Google...

3.1CVSS5.9AI score0.00175EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/01 11:42 p.m.26 views

CVE-2026-84328

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

0.00175EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/01 11:42 p.m.25 views

CVE-2026-84359

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

0.00141EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/01 11:42 p.m.5 views

CVE-2026-84359

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

3.1CVSS5.9AI score0.00141EPSS
SaveExploits0
CVE
CVE
added 2026/09/01 11:42 p.m.34 views

CVE-2026-84359

CVE-2026-84359 is an information leak in the Skia rendering library within Google Chrome prior to 152.0.7977.75 . A remote attacker who had already compromised the renderer process could exploit a crafted HTML page to leak cross-origin data , bypassing same-origin isolation. The vulnerability was...

3.1CVSS5.9AI score0.00141EPSS
SaveExploits0References2
CVE
CVE
added 2026/09/01 11:42 p.m.31 views

CVE-2026-84349

CVE-2026-84349 is a use-after-free vulnerability in the Browser component of Google Chrome prior to 152.0.7977.75 (Windows/Mac also .76). A remote attacker who had already compromised the renderer process could leverage a crafted HTML page to execute arbitrary code outside the sandbox , escalatin...

8.3CVSS6.2AI score0.0023EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/09/01 11:42 p.m.27 views

CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

0.0023EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/09/01 11:42 p.m.9 views

CVE-2026-84349

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

8.3CVSS6.2AI score0.0023EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.8 views

PT-2026-84568

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.75 Description Improper privilege management in the Downloads component allows a remote attacker who has already compromised the renderer process to spoof the address bar by using a specially crafted...

4.2CVSS5.9AI score0.00156EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.5 views

PT-2026-84561

Buffer overflow in GPU in Google Chrome on on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. Chromium security severity: High...

6.2AI score0.00257EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/09/01 12:00 a.m.6 views

PT-2026-84569

Information leak in Skia in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

5.9AI score0.00141EPSS
SaveExploits0References3
Rows per page
Query Builder