PUBLISHED
2026-06-04 23:17
MODIFIED
2026-06-04 23:17
EPSS (Prob. Exploit)
0.33%
Top 74.7%
> DESCRIPTION
Integer overflow in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to execute arbitrary code inside a sandbox via a malicious file. (Chromium security severity: High)
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-472: External Control of Assumed-Immutable Web Parameter - The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable, such as hidden form fields.
> GITHUB SECURITY ADVISORY
GHSA-xjj6-f33q-929c
HIGH
undici vulnerable to Denial of Service via unhandled error on excessive content-encodings
AFFECTED PACKAGES:
NPM / undici
>= 8.0.0, < 8.12.2
Fixed in: 8.12.2
NPM / undici
>= 7.18.0, < 7.30.1
Fixed in: 7.30.1
NPM / undici
>= 6.23.0, < 6.29.1
Fixed in: 6.29.1
> HISTORIQUE DES MODIFICATIONS
Première apparition
04/06/2026 23:17
Source: NVD
📊
ENRICHISSEMENT
01/07/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-472: External Control of Assumed-Immutable Web Parameter - The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable, such a...
Total des modifications: 1
Dernière mise à jour: 4 months ago