CVE-2025-5958
- EPSS 0.05%
- Veröffentlicht 11.06.2025 00:54:26
- Zuletzt bearbeitet 16.06.2025 14:50:15
Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-5959
- EPSS 0.04%
- Veröffentlicht 11.06.2025 00:54:26
- Zuletzt bearbeitet 16.06.2025 14:49:13
Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVE-2025-5068
- EPSS 0.09%
- Veröffentlicht 02.06.2025 23:36:53
- Zuletzt bearbeitet 26.09.2025 17:33:18
Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2025-5419
- EPSS 1.35%
- Veröffentlicht 02.06.2025 23:36:53
- Zuletzt bearbeitet 24.10.2025 14:06:46
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVE-2025-5066
- EPSS 0.04%
- Veröffentlicht 27.05.2025 20:43:04
- Zuletzt bearbeitet 29.05.2025 15:50:51
Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: ...
CVE-2025-5067
- EPSS 0.02%
- Veröffentlicht 27.05.2025 20:43:04
- Zuletzt bearbeitet 29.05.2025 15:50:43
Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2025-5281
- EPSS 0.04%
- Veröffentlicht 27.05.2025 20:43:04
- Zuletzt bearbeitet 29.05.2025 15:50:25
Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially obtain user information via a crafted HTML page. (Chromium security severity: Medium)
CVE-2025-5283
- EPSS 0.06%
- Veröffentlicht 27.05.2025 20:43:04
- Zuletzt bearbeitet 03.11.2025 20:19:16
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2025-5064
- EPSS 0.04%
- Veröffentlicht 27.05.2025 20:43:03
- Zuletzt bearbeitet 29.05.2025 15:51:09
Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)
CVE-2025-5065
- EPSS 0.04%
- Veröffentlicht 27.05.2025 20:43:03
- Zuletzt bearbeitet 29.05.2025 15:50:57
Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)