> CVE-2026-10992

« BACK_TO_HOME
PUBLISHED
2026-06-04 23:17
MODIFIED
2026-06-04 23:17
EPSS (Prob. Exploit)
0.31%
Top 77.6%
DATA SOURCES:
NVD 🔗 2026-06-05 FIRST EPSS 🔗 2026-10-25 GITHUB 🔗 2026-11-05 MSRC 🔗 2026-11-02

> DESCRIPTION

Insufficient data validation in Animation in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-4qv8-2p9j-2685 MODERATE

undici vulnerable to Denial of Service via unbounded memory in the EventSource parser

AFFECTED PACKAGES:
NPM / undici
>= 8.0.0, < 8.12.2
Fixed in: 8.12.2
NPM / undici
>= 7.0.0, < 7.30.1
Fixed in: 7.30.1
NPM / undici
>= 6.5.0, < 6.29.1
Fixed in: 6.29.1

> HISTORIQUE DES MODIFICATIONS

Première apparition
04/06/2026 23:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 5 months ago

> REFERENCES

https://chromereleases.googleblog.com/2026/06/stable-channel-update-for-desktop....
https://issues.chromium.org/issues/493534964
« BACK_TO_HOME