Catalog
Vulnerability catalog
Search by CVE, product, or vendor. Filter by severity, CISA KEV, source, stack, and weakness. Filtered views stay out of the search index.
- Medium4.3Out of bounds read in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.Check if you run itEPSS 0.21%Nov 10, 2025
- Medium5.3Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to obtain potentiaCheck if you run itEPSS 0.21%Nov 10, 2025
- Medium5.5Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from prCheck if you run itEPSS 0.09%Nov 10, 2025
- High8.8Use after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.Check if you run itEPSS 0.26%Nov 10, 2025
- High7.5Use after free in PageInfo in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corrCheck if you run itEPSS 0.24%Nov 10, 2025
- Medium5.9Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive informCheck if you run itEPSS 0.18%Nov 10, 2025
- Medium5.4Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.26%Nov 10, 2025
- Medium4.2Race in Storage in Google Chrome on Windows prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a craCheck if you run itEPSS 0.19%Nov 10, 2025
- Medium4.3Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.Check if you run itEPSS 0.30%Nov 10, 2025
- High8.8Race in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.Check if you run itEPSS 0.24%Nov 10, 2025
- Medium6.5Inappropriate implementation in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to bypass navigation reCheck if you run itEPSS 0.23%Nov 10, 2025
- High7.5Object lifecycle issue in Media in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page.Check if you run itEPSS 0.38%Nov 10, 2025
- High8.8Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.Check if you run itEPSS 0.37%Nov 10, 2025
- High8.8Type Confusion in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page.Check if you run itEPSS 8.08%Nov 10, 2025
- Medium5.3IBM Cognos Analytics Certified Containers 12.1.0 could disclose package parameter information due to the presence of hidden pages.Check if you run itEPSS 0.25%Nov 10, 2025
- High8.8Combodo iTop is a web based IT service management tool.Check if you run itEPSS 0.24%Nov 10, 2025
- High8.8Combodo iTop is a web based IT service management tool.Check if you run itEPSS 0.24%Nov 10, 2025
- Medium5.9Dell PowerScale OneFS, versions prior to 9.10.1.3 and versions 9.11.0.0 through 9.12.0.0, contains a use of a broken or risky cryptographic algorithm vulnerability.Check if you run itEPSS 0.19%Nov 10, 2025
- High8.6Combodo iTop is a web based IT service management tool.Check if you run itEPSS 0.50%Nov 10, 2025
- High8.6An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rds_superuser role.Check if you run itEPSS 0.78%Nov 10, 2025
- Medium6.3The Qualys Cloud Agent included a bundled uninstall script (qagent_uninstall.sh), specific to Mac and Linux supported versions that invoked multiple system commands without using aCheck if you run itEPSS 0.17%Nov 10, 2025
- High7.3Dell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with Unnecessary Privileges vulnerability in the Installer.Check if you run itEPSS 0.15%Nov 10, 2025
- Medium4.2In JetBrains ReSharper, Rider and dotTrace before 2025.2.5 local privilege escalation was possible via race conditionCheck if you run itEPSS 0.10%Nov 10, 2025
- High8.4In JetBrains ReSharper before 2025.2.4 missing signature verification in DPA Collector allows local privilege escalationCheck if you run itEPSS 0.09%Nov 10, 2025
- UnknownThis CVE ID has been rejected or withdrawn by its CVE Numbering Authority because it relates to internal functionality that is not available to customers.Open the advisoryNov 10, 2025
Sort