PUBLISHED
2026-03-20 02:16
MODIFIED
2026-03-20 02:16
EPSS (Prob. Exploit)
0.26%
Top 81.9%
> DESCRIPTION
Insufficient validation of untrusted input in Navigation in Google Chrome prior to 146.0.7680.153 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
> AFFECTED_PRODUCTS
ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.
> CWE DETAILED DESCRIPTIONS
CWE-20: Improper Input Validation - The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly.
> RED HAT SEVERITY ASSESSMENT
THREAT SEVERITY
Important
> GITHUB SECURITY ADVISORY
GHSA-hwpq-hmq9-wj77
MODERATE
ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)
AFFECTED PACKAGES:
PIP / onnx
>= 1.9.0, < 1.22.0
Fixed in: 1.22.0
> HISTORIQUE DES MODIFICATIONS
Première apparition
20/03/2026 02:16
Source: NVD
📊
ENRICHISSEMENT
01/04/2026 06:02
CWE
Champ modifié: Description CWE
Nouvelle valeur:
CWE-20: Improper Input Validation - The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process...
📊
ENRICHISSEMENT
22/03/2026 05:01
REDHAT
Champ modifié: Sévérité Red Hat
Nouvelle valeur:
{
"threat_severity": "Important",
"severity_scale": null
}
📊
ENRICHISSEMENT
22/03/2026 05:01
REDHAT
Total des modifications: 3
Dernière mise à jour: 7 months ago