Lucene search
+L

122 matches found

AstraLinux
AstraLinux
•added 2026/09/14 12:01 p.m.•11 views

Astra Linux – Vulnerability in Chromium

In version 119.0.6045.199 of Google Chrome’s Spellcheck, type confusion allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

8.8CVSS8.3AI score0.01078EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/14 12:00 a.m.•27 views

Linux Distros Unpatched Vulnerability : CVE-2026-67211

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 The opennlp-spellcheck...

7.5CVSS6AI score0.0074EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/11 5:49 p.m.•21 views

CVE-2026-67211 Apache OpenNLP: OOM DoS via Unbounded Array Allocation in SymSpellModelSerializer

OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affected: - 3.0.0-M4 - 3.0.0-M5 The opennlp-spellcheck extension was introduced in 3.0.0-M4. Releases 1.x and 2.x do not contain the affected code. Description: The SymSpellModelSerializer.create...

6AI score0.0074EPSS
SaveExploits0References1
vulnersOsv
vulnersOsv
•added 2026/09/11 5:49 p.m.•4 views

org.apache.opennlp:opennlp-distr (>=3.0.0-m4, <=3.0.0-m5) potentially affected by CVE-2026-67211 via org.apache.opennlp:opennlp-spellcheck (>=3.0.0-m4, <=3.0.0-m5)

org.apache.opennlp:opennlp-spellcheck MAVEN version =3.0.0-m4, =3.0.0-m4, =3.0.0-m5 Source cves: CVE-2026-67211 Source advisory: MEND:CVE-2026-67211...

7.5CVSS5.8AI score0.0074EPSS
SaveExploits0
Redos
Redos
•added 2026/09/11 12:00 a.m.•17 views

ROS-20260911-73-0052

The vulnerability of the Spellcheck component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

5.3CVSS6.1AI score0.00302EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/09/02 12:00 a.m.•26 views

Spellcheck Component Sensitive Data Access

The vulnerability in the spellcheck component of Google Chrome and Microsoft Edge web browsers is related to insufficient input validation. Exploitation of this vulnerability may allow a remote attacker to gain access to sensitive data via a specially crafted HTML page...

5.4CVSS6AI score0.00302EPSS
SaveExploits0References10Affected Software5
RedhatCVE
RedhatCVE
•added 2026/07/28 12:44 p.m.•25 views

CVE-2026-13911

An insufficient data validation flaw was found in the Spellcheck component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=507239830...

5.7CVSS5.8AI score0.00302EPSS
SaveExploits0References5
AstraLinux
AstraLinux
•added 2026/07/23 11:04 a.m.•17 views

Astra Linux – Vulnerability in Chromium

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.8AI score0.00302EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
•added 2026/07/07 2:36 a.m.•28 views

SUSE CVE-2026-13911

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.8AI score0.00302EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2026/07/03 2:00 p.m.•25 views

Chromium: CVE-2026-13911 Insufficient data validation in Spellcheck

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

5.3CVSS5.9AI score0.00302EPSS
SaveExploits0
EUVD
EUVD
•added 2026/07/01 12:34 a.m.•34 views

EUVD-2026-40597

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.8AI score0.00302EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/07/01 12:00 a.m.•20 views

Linux Distros Unpatched Vulnerability : CVE-2026-13911

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obta...

5.3CVSS5.7AI score0.00302EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/06/30 11:17 p.m.•21 views

DEBIAN-CVE-2026-13911

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.8AI score0.00302EPSS
SaveExploits0References1
NVD
NVD
•added 2026/06/30 11:17 p.m.•24 views

CVE-2026-13911

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS0.00302EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2026/06/30 11:17 p.m.•32 views

CVE-2026-13911

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.8AI score0.00302EPSS
SaveExploits0References3
CVE
CVE
•added 2026/06/30 10:38 p.m.•186 views

CVE-2026-13911

The Spellcheck component in Google Chrome and Microsoft Edge is vulnerable to insufficient data validation. A remote attacker who has compromised the renderer process can exploit this flaw by using a crafted HTML page to obtain potentially sensitive information from process memory. This issue was...

5.3CVSS5.8AI score0.00302EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2026/06/30 10:38 p.m.•56 views

CVE-2026-13911

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

0.00302EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/06/30 10:38 p.m.•19 views

CVE-2026-13911

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00302EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2026/06/30 10:38 p.m.•26 views

CVE-2026-13911

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.8AI score0.00302EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/30 12:00 a.m.•8 views

CVE-2026-13911: Improper Input Validation

Insufficient policy enforcement in Spellcheck in Google Chrome prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.3CVSS5.8AI score0.00302EPSS
SaveExploits0References2
Rows per page
Query Builder