Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: google'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2026-106408 6.5 Protection mechanism failure in Mobile in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) 2026-10-09 14:26:20
CVE-2026-28659 7.8 In MicroXR Blobstore, there is a possible way to access other app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitat 2026-10-05 20:17:21
CVE-2025-11720 8.1 The Firefox and Firefox Focus UI for the Android custom tab feature only showed the "site" that was loaded, not the full hostname. User supplied content hosted on a subdomain of a site could have been used to fool a user into thinking it was content 2026-10-05 15:10:00
CVE-2025-11718 6.5 When the address bar was hidden due to scrolling on Android, a malicious page could create a fake address bar to fool the user in response to a visibilitychange event. This vulnerability was fixed in Firefox 144. 2026-10-05 15:10:00
CVE-2025-11717 9.1 When switching between Android apps using the card carousel Firefox shows a black screen as its card image when a password-related screen was the last one being used. Prior to Firefox 144 the password edit screen was visible. This vulnerability was f 2026-10-05 15:10:00
CVE-2025-8364 4.3 A crafted URL using a blob: URI could have hidden the true origin of the page, resulting in a potential spoofing attack. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.*. This vulnerability was fixed 2026-10-05 15:10:00
CVE-2025-0246 6.5 When using an invalid protocol scheme, an attacker could spoof the address bar. *Note: This issue only affected Android operating systems. Other operating systems are unaffected.* *Note: This issue is a different issue from CVE-2025-0244. This vulne 2026-10-05 15:10:00
CVE-2026-103624 8.3 Use after free in Contextual Tasks in Google Chrome on on Windows prior to 154.0.8037.97 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium s 2026-10-05 15:06:56
CVE-2026-103628 9.6 Out of bounds write in WebGL in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical) 2026-10-05 15:06:49
CVE-2026-103625 8.8 Type confusion in V8 in Google Chrome prior to 154.0.8037.97 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High) 2026-10-05 15:06:44
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/1585
Zapisa po stranici: