142 matches found
CVE-2026-11244
Insufficient validation of untrusted input in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-11244
A vulnerability in the WebAuthentication component of Google Chrome and Microsoft Edge (prior to version 149.0.7827.53) allows a remote attacker who has already compromised the renderer process to bypass the Same-Origin Policy (SOP). This is achieved by tricking the browser into loading a crafted...
CVE-2026-11244
Insufficient validation of untrusted input in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. Chromium security severity: Low...
CVE-2026-10906
Use after free in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2026-10906: Use After Free
Use after free in WebAuthentication in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Google Chrome 输入验证错误漏洞
Google Chrome is a web browser developed by Google Inc. of the United States. Google Chrome has a vulnerability related to input validation, which stems from insufficient input validation by the WebAuthentication component...
PT-2026-46435
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.53 Description A use after free issue exists in WebAuthentication. A remote attacker can potentially exploit heap corruption—a condition where memory allocation on the heap is corrupted—via a crafted...
EUVD-2020-27643
Malware in sbrugna...
EUVD-2021-24495
Malware in sbrugna...
EUVD-2021-17449
Malware in sbrugna...
EUVD-2024-50238
Malicious code in bioql PyPI...
EUVD-2022-24800
Malicious code in bioql PyPI...
Astra Linux – Vulnerability in Chromium
The use of after free in WebAuthentication in Google Chrome before version 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
The vulnerability of the WebAuthentication component in Google Chrome and Microsoft Edge browsers allows attackers to enhance their privileges.
The vulnerability of the WebAuthentication component in Google Chrome and Microsoft Edge relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created HTML page...
SUSE CVE-2024-9956
Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
CVE-2024-9956
Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
CVE-2024-9955
Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...
CVE-2024-9956
Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation via a crafted HTML page. Chromium security severity: Medium...
