Lucene search
+L

596 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/04 12:00 a.m.•1 views

CVE-2026-11201: Use After Free

Use after free in ServiceWorker in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. Chromium security severity: Medium...

8.8CVSS8.6AI score0.00206EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/06/02 12:00 a.m.•20 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 149.0.7827.53 had a resource management vulnerability. This vulnerability stemmed from the reuse of resources after they were released by ServiceWorker, which could allow attackers to execute arbitrary code...

8.8CVSS8.2AI score0.00206EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/05/28 6:16 p.m.•30 views

CVE-2026-9116

An insufficient policy enforcement flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497436273...

7.4CVSS5.6AI score0.0024EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
•added 2026/05/28 12:00 a.m.•13 views

The vulnerability of the ServiceWorker interface in Google Chrome and Microsoft Edge browsers allows a hacker to bypass existing security mechanisms.

The vulnerability of the ServiceWorker interface in Google Chrome and Microsoft Edge is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow an attacker to bypass existing security measures remotely...

3.1CVSS6.1AI score0.00222EPSS
SaveExploits0References8Affected Software4
Tenable Nessus
Tenable Nessus
•added 2026/05/27 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2022-45410

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When a ServiceWorker intercepted a request with FetchEvent, the origin of the request was lost after the ServiceWorker took ownership of it. This had the effect...

6.5CVSS6.8AI score0.00794EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
•added 2026/05/22 4:43 a.m.•37 views

Chromium: CVE-2026-9116 Insufficient policy enforcement in ServiceWorker

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS5.7AI score0.0024EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/05/21 12:00 a.m.•18 views

Linux Distros Unpatched Vulnerability : CVE-2026-9116

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in ServiceWorker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to leak cross-origin data via a crafted...

4.3CVSS5.6AI score0.0024EPSS
SaveExploits0References2
NVD
NVD
•added 2026/05/20 8:16 p.m.•29 views

CVE-2026-9116

Insufficient policy enforcement in ServiceWorker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS0.0024EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/05/20 8:16 p.m.•22 views

CVE-2026-9116

Insufficient policy enforcement in ServiceWorker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS5.6AI score0.0024EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/05/20 7:12 p.m.•63 views

CVE-2026-9116

Insufficient policy enforcement in ServiceWorker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

0.0024EPSS
SaveExploits0References2
CVE
CVE
•added 2026/05/20 7:12 p.m.•236 views

CVE-2026-9116

The ServiceWorker component in Google Chrome (and potentially Microsoft Edge ) is vulnerable to a high-severity security flaw due to insufficient policy enforcement and a lack of data security mechanisms . A remote attacker can exploit this by navigating a victim to a crafted HTML page to leak cr...

4.3CVSS5.6AI score0.0024EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
•added 2026/05/20 7:12 p.m.•23 views

EUVD-2026-31166

Insufficient policy enforcement in ServiceWorker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS5.6AI score0.0024EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/05/20 7:12 p.m.•13 views

CVE-2026-9116

Insufficient policy enforcement in ServiceWorker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS5.6AI score0.0024EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/20 12:00 a.m.•15 views

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge is related to the lack of protective measures for the web page structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

6.4CVSS7.2AI score0.00168EPSS
SaveExploits0References7Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/20 12:00 a.m.•2 views

CVE-2026-9116: Protection Mechanism Failure

Insufficient policy enforcement in ServiceWorker in Google Chrome on prior to 148.0.7778.179 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: High...

4.3CVSS5.6AI score0.0024EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2026/05/20 12:00 a.m.•13 views

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge browsers allows a hacker to bypass the sandboxing protection mechanism.

The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge is related to a violation of data protection mechanisms. Exploiting this vulnerability could allow an attacker to bypass the sandboxing protection mechanisms...

8.3CVSS7.7AI score0.00304EPSS
SaveExploits0References7Affected Software4
CNNVD
CNNVD
•added 2026/05/19 12:00 a.m.•22 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 148.0.7778.179 contained a security vulnerability. This vulnerability stemmed from insufficient execution of the ServiceWorker strategy, which could allow remote attackers to leak cross-source data through...

4.3CVSS5.8AI score0.0024EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/05/08 10:34 p.m.•16 views

CVE-2026-7963

An inappropriate implementation flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497250399...

8.3CVSS7.4AI score0.00304EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2026/05/08 10:34 p.m.•17 views

CVE-2026-7958

An inappropriate implementation flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=496632973...

6.6CVSS5.9AI score0.00168EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2026/05/08 2:27 a.m.•19 views

SUSE CVE-2026-7909

Inappropriate implementation in ServiceWorker in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Chromium security severity: High...

3.1CVSS5.5AI score0.00222EPSS
SaveExploits0References3
Rows per page
Query Builder