Export limit exceeded: 395041 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Search
Search Results (395041 CVEs found)
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-79190 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-79151 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Improper input validation in Safebrowsing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Medium) | ||||
| CVE-2026-79143 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Incorrect authorization in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-79137 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Incorrect authorization in Extensions in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium) | ||||
| CVE-2026-79136 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Incorrect authorization in ServiceWorker in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-79116 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Missing authorization in Viz in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-79087 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Injection in Chrome Tabs in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-79084 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-09-17 | 4.3 Medium |
| Inadequate encryption strength in Notifications in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-79070 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Incorrect reference resolution in Cache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-79067 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Missing authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-79050 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-79049 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Incorrect reference resolution in Passwords in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted file. (Chromium security severity: Medium) | ||||
| CVE-2026-79006 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Protection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium) | ||||
| CVE-2026-79003 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Incorrect authorization in Device in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-79000 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Improper input validation in DeviceBoundSessionCredentials in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via crafted network traffic. (Chromium security severity: Low) | ||||
| CVE-2026-78979 | 2 Google, Microsoft | 2 Chrome, Windows | 2026-09-17 | 4.3 Medium |
| Race condition in Core in Google Chrome on on Windows prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low) | ||||
| CVE-2026-78976 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Improper input validation in StorageAccessAPI in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-78940 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Improper initialization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium) | ||||
| CVE-2026-78942 | 1 Google | 1 Chrome | 2026-09-17 | 4.3 Medium |
| Incorrect reference resolution in Loader in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Medium) | ||||
| CVE-2026-56176 | 1 Microsoft | 28 Office, Office 365, Office Macos 2021 and 25 more | 2026-09-17 | 7.8 High |
| Out-of-bounds read in Windows Win32K - GRFX allows an authorized attacker to elevate privileges locally. | ||||