Lucene search
K

22 matches found

Tenable Nessus
Tenable Nessus
added 2026/06/09 12:0 a.m.9 views

Linux Distros Unpatched Vulnerability : CVE-2026-11683

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in WebCodecs in Google Chrome prior to 149.0.7827.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML pag...

8.8CVSS5.8AI score0.00296EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/06/08 12:0 a.m.11 views

PT-2026-47509

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 149.0.7827.103 Description A use after free issue in WebCodecs allows a remote attacker to execute arbitrary code inside a sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that...

9.6CVSS6.7AI score0.00713EPSS
Exploits4References86
Vulnrichment
Vulnrichment
added 2026/05/28 10:25 p.m.9 views

CVE-2026-10013

Use after free in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

6.2AI score0.00319EPSS
Exploits0References2
Redos
Redos
added 2026/05/20 12:0 a.m.8 views

ROS-20260520-73-0047

A vulnerability in the WebCodecs component of the Google Chrome web browser is related to memory usage after it has been freed. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service using a specially crafted HTML page...

8.8CVSS5.7AI score0.00395EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2026/05/20 12:0 a.m.17 views

Amazon Linux 2023 : firefox (ALAS2023-2026-1652)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1652 advisory. Double-Free / Use-After-Free UAF in the IntoIter::drop and ThinVec::clear functions in the thinvec crate. A panic in ptr::dropinplace skips setting the length to zero. CVE-2026-6654...

9.8CVSS6.1AI score0.04938EPSS
Exploits2References60
Vulnrichment
Vulnrichment
added 2026/05/06 6:13 p.m.4 views

CVE-2026-7982

Uninitialized Use in WebCodecs in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

5.8AI score0.00239EPSS
Exploits0References2
OSV
OSV
added 2026/04/12 8:14 p.m.5 views

OPENSUSE-SU-2026:20575-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 147.0.7727.55 boo1261758: CVE-2026-5858: Heap buffer overflow in WebML CVE-2026-5859: Integer overflow in WebML CVE-2026-5860: Use after free in WebRTC CVE-2026-5861: Use after free in V8 CVE-2026-5862: Inappropriate implementation in ...

9.8CVSS7.9AI score0.00608EPSS
Exploits0References61
UbuntuCve
UbuntuCve
added 2026/04/08 10:16 p.m.1 views

CVE-2026-5888

Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score0.00258EPSS
Exploits0References3
AlpineLinux
AlpineLinux
added 2026/04/08 9:20 p.m.2 views

CVE-2026-5888

Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score0.00258EPSS
Exploits0
Debian CVE
Debian CVE
added 2026/04/08 9:20 p.m.3 views

CVE-2026-5888

Uninitialized Use in WebCodecs in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS8.3AI score0.00258EPSS
Exploits0
OSV
OSV
added 2026/04/02 4:48 p.m.12 views

MGASA-2026-0081 Updated thunderbird packages fix security vulnerabilities

Denial-of-service in the XML component. CVE-2025-59375 Spoofing issue in Thunderbird. CVE-2026-3889 Race condition, use-after-free in the Graphics: WebRender component. CVE-2026-4684 Incorrect boundary conditions in the Graphics: Canvas2D component. CVE-2026-4685 Incorrect boundary conditions in...

10CVSS6.5AI score0.01238EPSS
Exploits1References4
NVD
NVD
added 2026/04/01 5:16 a.m.5 views

CVE-2026-5280

Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00395EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/01 4:41 a.m.2 views

CVE-2026-5292

Out of bounds read in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.9AI score0.00248EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/01 4:41 a.m.3 views

CVE-2026-5280

Use after free in WebCodecs in Google Chrome prior to 146.0.7680.178 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: High...

6.2AI score0.00395EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/31 12:0 a.m.4 views

Google Chrome 安全漏洞

Google Chrome is a web browser developed by Google Inc. Versions of Google Chrome prior to 146.0.7680.178 contained a security vulnerability caused by an out-of-bound read operation in the WebCodecs component. This vulnerability could allow remote attackers to execute an out-of-bound memory read...

8.1CVSS5.9AI score0.00193EPSS
Exploits0References2
Kaspersky
Kaspersky
added 2026/03/31 12:0 a.m.3 views

KLA90963 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in CSS can be exploited to cause denial of service or execute...

9.6CVSS6.5AI score0.05492EPSS
Exploits0References4
Kaspersky
Kaspersky
added 2026/03/06 12:0 a.m.5 views

KLA90909 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Integer overflow vulnerability in ANGLE can be exploited to cause execute arbitrary code...

9.6CVSS6.3AI score0.00458EPSS
Exploits0References11
Kaspersky
Kaspersky
added 2026/03/03 12:0 a.m.6 views

KLA90908 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Integer overflow vulnerability in ANGLE can be exploited to cause execute arbitrary code and...

9.6CVSS6.3AI score0.00458EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2020-7990

Malware in sbrugna...

8.8CVSS9.1AI score0.00893EPSS
Exploits0References6
BDU FSTEC
BDU FSTEC
added 2024/04/01 12:0 a.m.5 views

The vulnerability of the WebCodecs component of the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s WebCodecs component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...

10CVSS7.5AI score0.0214EPSS
Exploits1References14Affected Software5
Rows per page
Query Builder