PUBLISHED
2026-06-09 00:16
MODIFIED
2026-06-09 00:16
EPSS (Prob. Exploit)
0.19%
Top 90.9%
> DESCRIPTION
Uninitialized Use in Codecs in Google Chrome on Linux, ChromeOS prior to 149.0.7827.103 allowed a remote attacker to leak cross-origin data via a crafted video file. (Chromium security severity: High)
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-457: Use of Uninitialized Variable - The code uses a variable that has not been initialized, leading to unpredictable or unintended results.
> RED HAT SEVERITY ASSESSMENT
THREAT SEVERITY
Important
> GITHUB SECURITY ADVISORY
GHSA-mrwp-f3q8-3g9p
HIGH
follow-redirects: Cross-realm sensitiveHeaders arrays are discarded and custom credentials can follow redirects
AFFECTED PACKAGES:
NPM / follow-redirects
>= 1.16.0, <= 1.16.1
Fixed in: 1.16.2
> HISTORIQUE DES MODIFICATIONS
Première apparition
09/06/2026 00:16
Source: NVD
📊
ENRICHISSEMENT
01/07/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-457: Use of Uninitialized Variable - The code uses a variable that has not been initialized, leading to unpredictable or unintended results.
📊
ENRICHISSEMENT
14/06/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
14/06/2026 05:01
REDHAT
Total des modifications: 3
Dernière mise à jour: 4 months ago