Lucene search
+L

717 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•2 views

CVE-2026-78940: Improper Initialization

Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00328EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•20 views

PT-2026-81565

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Extensions allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin polic...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•17 views

PT-2026-81693

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Missing authorization in the Preload feature allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•18 views

PT-2026-81572

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Core component allows a remote attacker to bypass the web origin policy. This occurs when an attacker has already compromised the renderer process and use...

9.6CVSS6.4AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•18 views

PT-2026-81730

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect authorization in CustomTabs allows a local attacker to bypass the web origin policy through a co-installed application. The web origin policy is a security mechanis...

9.8CVSS6.4AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•17 views

PT-2026-81697

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description A race condition in WebAppInstalls allows a remote attacker to bypass the web origin policy through a co-installed application. This exploitation requires the use of social...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•20 views

PT-2026-81782

Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 152.0.7977.65 Description Incorrect authorization in CustomTabs allows a local attacker to bypass the web origin policy through a co-installed application. The web origin policy is a security mechanis...

9.6CVSS6.4AI score0.0056EPSS
SaveExploits1References335
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•5 views

CVE-2026-79264: Use of Incorrectly-Resolved Name or Reference

Incorrect reference resolution in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.6AI score0.00328EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/25 12:00 a.m.•1 views

CVE-2026-79243: Improper Input Validation

Improper input validation in ReadingList in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.9AI score0.00297EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•23 views

PT-2026-81635

Name of the Vulnerable Software and Affected Versions Google Chrome on Mac versions prior to 152.0.7977.65 Description Missing authorization allows a remote attacker to bypass the web origin policy—a security mechanism that restricts how a document or script loaded from one origin can interact wi...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•14 views

PT-2026-81577

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description An externally controlled reference in the QUIC protocol allows a remote attacker to bypass the web origin policy through the use of a crafted HTML page. QUIC is a transport layer networ...

9.6CVSS6.4AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•15 views

PT-2026-81645

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the Loader component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded fr...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•20 views

PT-2026-81750

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Extensions allows a remote attacker who has compromised the renderer process to bypass the web origin policy through a crafted HTML page. The web origin polic...

9.6CVSS6.4AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•19 views

PT-2026-81803

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the ReadingList component allows a remote attacker who has already compromised the renderer process to bypass the web origin policy. This is achieved by usi...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•20 views

PT-2026-81811

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper input validation in the Network component allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts how a document or...

9.6CVSS6.6AI score0.0056EPSS
SaveExploits1References335
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•18 views

PT-2026-81552

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Improper initialization in the Network component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•18 views

PT-2026-81559

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incomplete cleanup in Chromium allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•17 views

PT-2026-81715

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the ServiceWorker allows a remote attacker to bypass the web origin policy through the use of a crafted HTML page. The web origin policy is a security mechani...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•17 views

PT-2026-81680

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in Paint allows a remote attacker to potentially bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from...

9.6CVSS6.6AI score0.0056EPSS
SaveExploits1References334
Positive Technologies
Positive Technologies
•added 2026/08/25 12:00 a.m.•13 views

PT-2026-81720

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 152.0.7977.65 Description Incorrect authorization in the browser allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one...

9.6CVSS6.5AI score0.0056EPSS
SaveExploits1References334
Rows per page
Query Builder