114 matches found
chromium-browser: skia: chromium-browser: skia: Side-channel information leakage in Skia
A side-channel information leakage flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=506377118...
chromium-browser: skia: chromium-browser: skia: Side-channel information leakage in Skia
A side-channel information leakage flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=506377118...
WSO2 Identity Server side-channel information leakage vulnerability
WSO2 Identity Server versions prior to 7.0.0.134 and 7.1.0.42, WSO2 Carbon Abstract OTP Authenticator versions prior to 1.0.10.2, as well as Email OTP Authenticator versions prior to 1.0.30.5, have a side-channel information leakage vulnerability. This vulnerability arises from the authentication...
Guangzhou Juan IoT EseeCloud App side-channel information leakage vulnerability
The Guangzhou Juan IoT EseeCloud App versions 4.9.6 and earlier, as well as the EseeCloud Firmware version 4.9.86.0 and earlier, have a vulnerability related to side-channel information leakage. This vulnerability arises from observable differences in the responses when endpoints process ID value...
Astra Linux – Vulnerability in Chromium
Leakage of side-channel information in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data through a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Leakage of side-channel information in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory through a crafted HTML page. Chromium security severity: Low...
CVE-2026-17914: Improper Protection of Physical Side Channels
Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Low...
CVE-2026-14012: Improper Protection of Physical Side Channels
Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-13889: Improper Input Validation
Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-11284: Improper Protection of Physical Side Channels
Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11153: Improper Protection of Physical Side Channels
Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2026-3929: Improper Protection of Physical Side Channels
Side-channel information leakage in ResourceTiming in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
CVE-2021-0978
In getSerialForPackage of DeviceIdentifiersPolicyService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed...
CVE-2025-13992: Improper Protection of Physical Side Channels
Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site isolation via a crafted HTML page. Chromium security severity: Medium...
EUVD-2018-11967
Malware in sbrugna...
EUVD-2023-41369
Malicious code in bioql PyPI...
EUVD-2023-25500
Malicious code in bioql PyPI...