594 matches found
ROS-20260915-73-0048
The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to gain access to confidential data through a specially created HTML page...
CVE-2026-91709: Access of Resource Using Incompatible Type
Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
CVE-2026-91715: Access of Resource Using Incompatible Type
Type confusion in ServiceWorker in Google Chrome prior to 153.0.8010.47 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. Chromium security severity: High...
PT-2026-93129
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.47 Description An out of bounds write occurs in the ServiceWorker component, which is a script that the browser runs in the background, separate from a web page. This issue allows a remote attacker to...
Astra Linux – Vulnerability in Chromium
Type Confusion in the ServiceWorker API of Google Chrome prior to version 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Firefox and Thunderbird
When a ServiceWorker intercepted a request using FetchEvent, the origin of the request was lost after the ServiceWorker took control of it. This caused the SameSite cookie protections to be negated. This issue was addressed in the specifications, and later in various browsers. This vulnerability...
Astra Linux – Vulnerability in Firefox
Under certain circumstances, the offline cache of a ServiceWorker may have been leaked to the file system when using private browsing mode. This vulnerability affects Firefox versions earlier than 111...
ROS-20260914-73-0118
The vulnerability of the ServiceWorker component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...
ROS-20260914-73-0100
The vulnerability of Google Chrome’s ServiceWorker component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...
SUSE CVE-2026-87598
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87439
A flaw was found in chromium-browser's ServiceWorker. A remote attacker, who has already compromised the renderer process, could exploit this vulnerability by providing a specially crafted HTML page. This could lead to an information leak, allowing the attacker to obtain sensitive information...
CVE-2026-87598
An incorrect authorization flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=499218516...
CVE-2026-87429
A missing authorization flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497025031...
CVE-2026-87574
An information leak flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=517092658...
CVE-2026-87614
An incorrect authorization flaw was found in the ServiceWorker component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=497359396...
CVE-2026-87614
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87614
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-87598
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...
DEBIAN-CVE-2026-87598
Incorrect authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...