Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.3Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain cross-origin data via a crafted HTML page.EPSS 0.2%Oct 6, 2026
- High8.6Information disclosure, sandbox escape in the Security: Process Sandboxing component.EPSS 0.4%May 19, 2026
- Medium6.5Microsoft Word Information Disclosure VulnerabilityKEVEPSS 19.6%Sep 12, 2023
- Critical9.8When doing HTTP(S) transfers, libcurl might erroneously use the read callback ( ) to ask for data to send, even when the option has been set, if the same handle previo…EPSS 4.7%Dec 5, 2022
- Critical9.8xmlparse.c in Expat (aka libexpat) before 2.4.5 allows attackers to insert namespace-separator characters into namespace URIs.EPSS 34.2%Feb 16, 2022
- Medium5.3curl 7.61.0 through 7.76.1 suffers from exposure of data element to wrong session due to a mistake in the code for CURLOPT_SSL_CIPHER_LIST when libcurl is built to use…EPSS 3.0%Jun 11, 2021
- Medium5.9In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes.EPSS 2.2%Jun 20, 2019
7 records · page 1 of 1
PreviousNext