| CVE-2025-6191 | ÉLEVÉE8.8 | Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) | 18/06/2025 |
| CVE-2025-5981 | MOYENNE6.5 | Arbitrary file write as the OSV-SCALIBR user on the host system via a path traversal vulnerability when using OSV-SCALIBR's unpack() function for container images. Particularly, when using the CLI flag --remote-image on untrusted container images. | 18/06/2025 |
| CVE-2025-4565 | MOYENNE5.3 | Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with | 16/06/2025 |
| CVE-2025-4613 | ÉLEVÉE8.8 | Path traversal in Google Web Designer's template handling versions prior to 16.3.0.0407 on Windows allows attacker to achieve remote code execution by tricking users into downloading a malicious ad template | 12/06/2025 |
| CVE-2025-5959 | ÉLEVÉE8.8 | Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) | 11/06/2025 |
| CVE-2025-5958 | ÉLEVÉE8.8 | Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | 11/06/2025 |
| CVE-2025-5419KEV | ÉLEVÉE8.8 | Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | 03/06/2025 |
| CVE-2025-5068 | ÉLEVÉE8.8 | Use after free in Blink in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) | 03/06/2025 |
| CVE-2025-5283 | MOYENNE5.4 | Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) | 27/05/2025 |
| CVE-2025-5281 | MOYENNE5.4 | Inappropriate implementation in BFCache in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially obtain user information via a crafted HTML page. (Chromium security severity: Medium) | 27/05/2025 |
| CVE-2025-5280 | ÉLEVÉE8.8 | Out of bounds write in V8 in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | 27/05/2025 |
| CVE-2025-5067 | MOYENNE5.4 | Inappropriate implementation in Tab Strip in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low) | 27/05/2025 |
| CVE-2025-5066 | MOYENNE6.5 | Inappropriate implementation in Messages in Google Chrome on Android prior to 137.0.7151.55 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) | 27/05/2025 |
| CVE-2025-5065 | MOYENNE6.5 | Inappropriate implementation in FileSystemAccess API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium) | 27/05/2025 |
| CVE-2025-5064 | MOYENNE5.4 | Inappropriate implementation in Background Fetch API in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium) | 27/05/2025 |
| CVE-2025-5063 | ÉLEVÉE8.8 | Use after free in Compositing in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) | 27/05/2025 |
| CVE-2025-4600 | ÉLEVÉE7.5 | A request smuggling vulnerability existed in the Google Cloud Classic Application Load Balancer due to improper handling of chunked-encoded HTTP requests. This allowed attackers to craft requests that could be misinterpreted by backend servers. The issue was fixed by disallowing stray data after a chunk, and is no long | 16/05/2025 |
| CVE-2025-4664 | MOYENNE4.3 | Insufficient policy enforcement in Loader in Google Chrome prior to 136.0.7103.113 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security severity: High) | 14/05/2025 |
| CVE-2025-1079 | ÉLEVÉE7.8 | Client RCE on macOS and Linux via improper symbolic link resolution in Google Web Designer's preview feature | 12/05/2025 |
| CVE-2025-4372 | ÉLEVÉE8.8 | Use after free in WebAudio in Google Chrome prior to 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) | 06/05/2025 |