PUBLISHED
2026-06-10 20:16
MODIFIED
2026-06-10 20:19
EPSS (Prob. Exploit)
0.30%
Top 78.7%
> DESCRIPTION
Race in V8 in Google Chrome prior to 144.0.7559.99 allowed a remote attacker to potentially exploit type confusion via a crafted HTML page. (Chromium security severity: High)
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization - The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.
> GITHUB SECURITY ADVISORY
GHSA-663r-x48j-fg8p
MODERATE
jsonata: Function Binding Prototype Pollution via hasOwnProperty Override
AFFECTED PACKAGES:
NPM / jsonata
>= 2.0.0, < 2.2.1
Fixed in: 2.2.1
NPM / jsonata
< 1.8.8
Fixed in: 1.8.8
> HISTORIQUE DES MODIFICATIONS
Première apparition
10/06/2026 20:16
Source: NVD
📊
ENRICHISSEMENT
01/11/2026 06:59
CWE
Champ modifié: Description CWE
Ancienne valeur:
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') - The product contains a concurrent code sequence that requires temporary, exclusive access to a sh...
Nouvelle valeur:
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization - The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but ...
📊
ENRICHISSEMENT
01/07/2026 06:01
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') - The product contains a concurrent code sequence that requires temporary, exclusive access to a sh...
Total des modifications: 2
Dernière mise à jour: 6 days ago