Lucene search
+L

3276 matches found

RedHat Linux
RedHat Linux
•added 2026/09/14 4:17 a.m.•13 views

firefox: thunderbird: Privilege escalation in the DOM: Workers component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Workers component...

8.8CVSS5.9AI score0.00278EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2026/09/14 3:15 a.m.•17 views

firefox: thunderbird: Privilege escalation in the DOM: Workers component

A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Workers component...

8.8CVSS5.9AI score0.00278EPSS
SaveExploits0References8
osv_alsa
osv_alsa
•added 2026/09/14 12:00 a.m.•18 views

ALSA-2026:67129 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: thunderbird: Privilege escalation in the DOM: Workers component CVE-2026-16365 firefox: thunderbird: Sandbox escape in the Remote Settings Client component...

10CVSS6.6AI score0.00455EPSS
SaveExploits0References21
Microsoft CVE
Microsoft CVE
•added 2026/09/12 1:01 a.m.•25 views

Chromium CVE-2026-76019: Incorrect authorization in Workers

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.1CVSS7.5AI score0.00335EPSS
SaveExploits0
Redos
Redos
•added 2026/09/11 12:00 a.m.•21 views

ROS-20260911-73-0165

The vulnerability of the Workers component in Google Chrome and Microsoft Edge is related to a lack of mechanisms for verifying the source of the request. Exploiting this vulnerability allows an attacker to manipulate data integrity through a specially crafted HTML page...

6.5CVSS6.8AI score0.00262EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2026/09/10 1:47 a.m.•12 views

SUSE CVE-2026-87466

Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00272EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
•added 2026/09/09 1:43 a.m.•15 views

CVE-2026-87466

A flaw was found in Chromium. Incorrect authorization within the Workers component allows a remote attacker to bypass the web origin policy. This can be achieved by enticing a user to visit a specially crafted HTML page, potentially leading to unauthorized access to sensitive information or actio...

4.3CVSS5.4AI score0.00272EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/09 1:17 a.m.•12 views

CVE-2026-87466

Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS0.00272EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2026/09/09 1:17 a.m.•13 views

DEBIAN-CVE-2026-87466

Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00272EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2026/09/09 1:17 a.m.•15 views

CVE-2026-87466

Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00272EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/09 12:09 a.m.•13 views

EUVD-2026-74328

Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00272EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/09/09 12:09 a.m.•64 views

CVE-2026-87466

Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

0.00272EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/09 12:09 a.m.•10 views

CVE-2026-87466

Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

5.5AI score0.00272EPSS
SaveExploits0References2
CVE
CVE
•added 2026/09/09 12:09 a.m.•216 views

CVE-2026-87466

Google Chrome versions prior to 153.0.8010.36 are vulnerable to CVE-2026-87466 due to incorrect authorization in Workers . A remote attacker could exploit this by using a crafted HTML page to bypass the web origin policy . This vulnerability is also addressed in Microsoft Edge as it ingests Chrom...

4.3CVSS5.5AI score0.00272EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/09/09 12:09 a.m.•28 views

CVE-2026-87466

Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00272EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/09 12:00 a.m.•5 views

CVE-2026-87466: Incorrect Authorization

Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS5.5AI score0.00272EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2026/09/09 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2026-87466

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Incorrect authorization in Workers in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to bypass web origin policy via a crafted HTML page. Chromi...

4.3CVSS5.5AI score0.00272EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•19 views

PT-2026-88566

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 153.0.8010.36 Description Incorrect authorization in Workers allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin...

9.6CVSS6.4AI score0.00573EPSS
SaveExploits11References241
EUVD
EUVD
•added 2026/09/04 3:20 p.m.•15 views

EUVD-2026-71259

IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily large or computationallyexpensive requests that cause the LLM agent workers to be held for extended periods — rangingfrom tens of seconds to over ten minutes per request. When...

6.5CVSS5.2AI score0.00411EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•39 views

PT-2026-85590

IBM MQ Agent CD: v1.0.0, v1.0.1, v2.0.0, v2.0.1 An authenticated user with a valid session cookie can submit arbitrarily large or computationallyexpensive requests that cause the LLM agent workers to be held for extended periods — rangingfrom tens of seconds to over ten minutes per request. When...

6.5CVSS5.2AI score0.00411EPSS
SaveExploits0References2
Rows per page
Query Builder