Lucene search
+L

868 matches found

Positive Technologies
Positive Technologies
•added 2026/04/10 12:00 a.m.•22 views

PT-2026-46645

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description A use after free issue exists in WebRTC, which is a framework for real-time communication. This flaw allows a remote attacker to execute arbitrary code within a sandbox by utilizing a...

10CVSS8.7AI score0.00387EPSS
SaveExploits0
Kaspersky
Kaspersky
•added 2026/04/10 12:00 a.m.•18 views

KLA90976 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, obtain sensitive information, execute arbitrary code, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Heap...

9.6CVSS7.7AI score0.0048EPSS
SaveExploits0References65
osv_rlsa
osv_rlsa
•added 2026/04/09 12:07 p.m.•24 views

RLSA-2026:5931 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR...

7.5CVSS8.1AI score0.00967EPSS
SaveExploits1References38
Rockylinux
Rockylinux
•added 2026/04/09 12:07 p.m.•17 views

firefox security update

An update is available for firefox. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...

10CVSS8AI score0.00967EPSS
SaveExploits1
EUVD
EUVD
•added 2026/04/09 12:31 a.m.•11 views

EUVD-2026-20655

Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

9.1AI score0.0048EPSS
SaveExploits0References3
NVD
NVD
•added 2026/04/08 10:16 p.m.•17 views

CVE-2026-5860

Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.0048EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2026/04/08 9:21 p.m.•26 views

CVE-2026-5912

Integer overflow in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Low...

8.8CVSS7.7AI score0.00215EPSS
SaveExploits0
Cvelist
Cvelist
•added 2026/04/08 9:20 p.m.•52 views

CVE-2026-5860

Use after free in WebRTC in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

0.0048EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2026/04/07 9:38 p.m.•19 views

firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the WebRTC: Signaling component...

7.5CVSS7.2AI score0.00651EPSS
SaveExploits0References6
Kaspersky
Kaspersky
•added 2026/04/07 12:00 a.m.•117 views

KLA90973 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Heap buffer...

9.6CVSS8.1AI score0.00608EPSS
SaveExploits1References4
FreeBSD
FreeBSD
•added 2026/04/07 12:00 a.m.•45 views

chromium -- security fixes

Chrome Releases reports: This update includes multiple security fixes: Critical: CVE-2026-5858: Heap buffer overflow in WebML. CVE-2026-5859: Integer overflow in WebML. High: CVE-2026-5860: Use after free in WebRTC. CVE-2026-5861: Use after free in V8. CVE-2026-5862: Inappropriate implementation ...

9.8CVSS7.2AI score0.00608EPSS
SaveExploits1References1
osv_mgasa
osv_mgasa
•added 2026/04/02 4:48 p.m.•34 views

MGASA-2026-0080 Updated nss & firefox packages fix security vulnerabilities

Denial-of-service in the XML component. CVE-2025-59375 Race condition, use-after-free in the Graphics: WebRender component. CVE-2026-4684 Incorrect boundary conditions in the Graphics: Canvas2D component. CVE-2026-4685 Incorrect boundary conditions in the Graphics: Canvas2D component. CVE-2026-46...

10CVSS7.3AI score0.0138EPSS
SaveExploits2References5
Positive Technologies
Positive Technologies
•added 2026/04/02 12:00 a.m.•24 views

PT-2026-46582

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description A use after free issue exists in WebRTC, which allows a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. Use after free is a memory...

10CVSS8.7AI score0.00355EPSS
SaveExploits0
CNVD
CNVD
•added 2026/03/31 12:00 a.m.•30 views

Denial of Service Vulnerability in Multiple Mozilla Products (CNVD-2026-19973)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A denial of service vulnerability exists in multiple Mozilla products du...

7.5CVSS7.2AI score0.00651EPSS
SaveExploits0
CNVD
CNVD
•added 2026/03/31 12:00 a.m.•29 views

Code execution vulnerability in multiple Mozilla products (CNVD-2026-19983)

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code execution vulnerability exists in multiple Mozilla products due to...

9.8CVSS9.1AI score0.00656EPSS
SaveExploits0
RedHat Linux
RedHat Linux
•added 2026/03/30 4:05 p.m.•19 views

firefox: thunderbird: Undefined behavior in the WebRTC: Signaling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Undefined behavior in the WebRTC: Signaling component...

8.1CVSS7.2AI score0.00481EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2026/03/29 12:00 a.m.•13 views

openSUSE 16 Security Update : chromium (openSUSE-SU-2026:20422-1)

The remote openSUSE 16 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:20422-1 advisory. Changes in chromium: - Chromium 146.0.7680.153 boo1259964: CVE-2026-4439: Out of bounds memory access in WebGL CVE-2026-4440: Out of bounds read...

8.8CVSS7.7AI score0.00431EPSS
SaveExploits2References53
osv_opensuse
osv_opensuse
•added 2026/03/27 12:32 p.m.•10 views

OPENSUSE-SU-2026:20439-1 Security update for MozillaFirefox

This update for MozillaFirefox fixes the following issues: Update to Firefox 140.9.0 ESR MFSA 2026-22, bsc1260083: - CVE-2026-4684: Race condition, use-after-free in the Graphics: WebRender component - CVE-2026-4685: Incorrect boundary conditions in the Graphics: Canvas2D component - CVE-2026-468...

10CVSS7.3AI score0.0138EPSS
SaveExploits2References39
RedHat Linux
RedHat Linux
•added 2026/03/26 11:38 a.m.•18 views

firefox: thunderbird: Denial-of-service in the WebRTC: Signaling component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Denial-of-service in the WebRTC: Signaling component...

7.5CVSS7.2AI score0.00651EPSS
SaveExploits0References6
osv_alsa
osv_alsa
•added 2026/03/26 12:00 a.m.•23 views

ALSA-2026:5930 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Use-after-free in the JavaScript Engine component CVE-2026-4701 firefox: thunderbird: Memory safety bugs fixed in Firefox ESR 115.34, Firefox ESR...

10CVSS8.1AI score0.00967EPSS
SaveExploits1References76
Rows per page
Query Builder