PUBLISHED
2026-06-04 23:17
MODIFIED
2026-06-04 23:17
EPSS (Prob. Exploit)
0.19%
Top 91.9%
> DESCRIPTION
Inappropriate implementation in WebRTC in Google Chrome prior to 149.0.7827.53 allowed an attacker in a privileged network position to leak cross-origin data via malicious network traffic. (Chromium security severity: Medium)
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-20: Improper Input Validation - The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly.
> GITHUB SECURITY ADVISORY
GHSA-rxp7-6hxx-x8q5
MODERATE
ip-address: Address6 matches a zone identifier in quadratic time ahead of its length limit, allowing a single long string to stall the process
AFFECTED PACKAGES:
NPM / ip-address
<= 10.7.3
Fixed in: 10.7.4
> HISTORIQUE DES MODIFICATIONS
Première apparition
04/06/2026 23:17
Source: NVD
📊
ENRICHISSEMENT
01/07/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-20: Improper Input Validation - The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process...
Total des modifications: 1
Dernière mise à jour: 4 months ago