|
511
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Use after free in GPU in Google Chrome on Mac prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML pag…
|
CWE-416
Use After Free
|
CVE-2026-12023
|
2026-06-13 03:06 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
512
|
5.3 |
MEDIUM
Network
|
google
|
chrome
|
Insufficient validation of untrusted input in Network in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a craft…
|
CWE-20
Improper Input Validation
|
CVE-2026-12025
|
2026-06-13 03:06 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
513
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Use after free in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML…
|
CWE-416
Use After Free
|
CVE-2026-12028
|
2026-06-13 03:06 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
514
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Use after free in Video in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HT…
|
CWE-416
Use After Free
|
CVE-2026-12029
|
2026-06-13 03:05 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
515
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Out of bounds write in GPU in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted…
|
CWE-122
Heap-based Buffer Overflow
|
CVE-2026-12030
|
2026-06-13 03:05 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
516
|
8.3 |
HIGH
Network
|
google
|
chrome
|
Inappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape vi…
|
CWE-693
Protection Mechanism Failure
|
CVE-2026-12031
|
2026-06-13 03:05 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
517
|
3.1 |
LOW
Network
|
google
|
chrome
|
Inappropriate implementation in Passwords in Google Chrome on Android prior to 149.0.7827.115 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted…
|
CWE-346
Origin Validation Error
|
CVE-2026-12032
|
2026-06-13 03:05 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
518
|
5.3 |
MEDIUM
Network
|
google
|
chrome
|
Out of bounds read in VideoCapture in Google Chrome prior to 149.0.7827.115 allowed a remote attacker who had compromised the GPU process to obtain potentially sensitive information from process memo…
|
CWE-125
Out-of-bounds Read
|
CVE-2026-12033
|
2026-06-13 03:04 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
519
|
8.7 |
HIGH
Network
|
axios
|
axios
|
Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototyp…
|
CWE-441 CWE-1321
Confused Deputy Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
|
CVE-2026-44494
|
2026-06-13 03:01 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
520
|
7.5 |
HIGH
Network
|
axios
|
axios
|
Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF co…
|
CWE-400 CWE-1333
Uncontrolled Resource Consumption Inefficient Regular Expression Complexity
|
CVE-2026-44496
|
2026-06-13 03:00 |
2026-06-12 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|