Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Critical9.8Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, includinCheck this weekEPSS 22.00%Jun 16, 2025
- High7.4Privilege Escalation in MiniOS in Google ChromeOS (16063.45.2 and potentially others) on enrolled devices allows a local attacker to gain root code execution via exploiting a debugCheck if you run itEPSS 9.00%Jun 16, 2025
- Medium6.9Improper handling of non-200 http responses in the PingFederate Google Adapter leads to thread exhaustion under normal usage conditions.Check this weekEPSS 34.00%Jun 15, 2025
- High7.1Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloadiCheck if you run itEPSS 0.61%Jun 12, 2025
- High8.8Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.Check this weekEPSS 13.34%Jun 11, 2025
- High8.8Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.40%Jun 11, 2025
- Critical9.4A critical security vulnerability exists in remote cache extensions for common build systems utilizing bucket-based remote cache (such as those using Amazon S3, Google Cloud StoragCheck if you run itEPSS 0.25%Jun 10, 2025
- High7.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Nir Complete Google Seo Scan complete-google-seo-scan allows SQL Injection.ThiCheck this weekEPSS 42.00%Jun 6, 2025
- Medium6.5Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ángel C.Check this weekEPSS 26.00%Jun 6, 2025
- Medium4.8Improper sanitization of the value of the 'href' and 'xlink:href' attributes in ' ' SVG elements in AngularJS's 'ngSanitize' module allows attackers to bypass common image source rCheck if you run itEPSS 0.31%Jun 4, 2025
- High8.8Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 3.45%Jun 2, 2025
- High8.8Google Chromium V8 Out-of-Bounds Read and Write VulnerabilityPatch nowKEVEPSS 7.82%Jun 2, 2025
- Medium6.4The LA-Studio Element Kit for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Image Compare and Google Maps widgets in all versions upCheck if you run itEPSS 0.29%May 30, 2025
- Medium5.4Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.64%May 27, 2025
- Medium5.4Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially obtain user information via a crafted HTML page.Check this weekEPSS 24.00%May 27, 2025
- Medium5.4Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check this weekEPSS 38.00%May 27, 2025
- Medium6.5Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perfCheck this weekEPSS 42.00%May 27, 2025
- High8.8Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 2.77%May 27, 2025
- Medium6.5Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.42%May 27, 2025
- Medium5.4Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page.Check if you run itEPSS 0.34%May 27, 2025
- High8.8Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 3.62%May 27, 2025
- Medium5.5In the function process_crypto_cmd, the values of ptrs[i] can be potentially equal to NULL which is valid value after calling slice_map_array().Check this weekEPSS 10.00%May 27, 2025
- High8.4There is a possible bypass of carrier restrictions due to an unusual root cause.Check this weekEPSS 11.00%May 27, 2025
- Medium5.1There is a possible disclosure of Bluetooth adapter details due to a permissions bypass.Check this weekEPSS 10.00%May 27, 2025
- High7.8In the Linux kernel, the following vulnerability has been resolved: tracing: Fix oob write in trace_seq_to_buffer() syzbot reported this bug: ======================================Check if you run itEPSS 0.25%May 20, 2025