Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-11174 State: PUBLISHED Published: 2025-11-01T01:47:40.902Z Last Updated: 2025-11-03T18:57:14.666Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: barn2media Products: Document Library Lite Problem Types: CWE-285 Description: The Document Library Lite plugin for WordPress is vulnerable to Improper Authorization in all versions up to, and including, 1.1.6. This is due to the plugin exposing an unauthenticated AJAX action dll_load_posts which returns a JSON table of document data without performing nonce or capability checks. The handler accepts an attacker-controlled args array where the status option explicitly allows draft, pending, future,
The handler accepts an attacker-controlled args array where the status option explicitly allows draft, pending, future, and any. This makes it possible for unauthenticated attackers to retrieve unpublished document titles and content via the AJAX endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2b73d48a-1f10-4e47-a18f-82a3103b72bd?source=cve - https://plugins.trac.wordpress.org/browser/document-library-lite/tags/1.1.5/src/Table/Ajax_Handler.php#L23 - https://plugins.trac.wordpress.org/browser/document-library-lite/tags/1.1.5/src/Table/Ajax_Handler.php#L32 - https://plugins.trac.wordpress.org/browser/document-
r/document-library-lite/tags/1.1.5/src/Table/Ajax_Handler.php#L32 - https://plugins.trac.wordpress.org/browser/document-library-lite/tags/1.1.5/src/Simple_Document_Library.php#L492 - https://plugins.trac.wordpress.org/changeset/3385033/document-library-lite/trunk/src/Table/Ajax_Handler.php
CVE ID: CVE-2025-11176 State: PUBLISHED Published: 2025-10-15T05:23:48.130Z Last Updated: 2025-10-15T18:15:24.306Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: kybernetikservices Products: Quick Featured Images Problem Types: CWE-639 Description: The Quick Featured Images plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 13.7.2 via the qfi_set_thumbnail and qfi_delete_thumbnail AJAX actions due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Author-level access and above, to change or remove featured images of other user's posts. Additional
ed attackers, with Author-level access and above, to change or remove featured images of other user's posts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4f9a1cfc-5e52-40da-bb9d-8f2b46d37c8c?source=cve - https://plugins.trac.wordpress.org/browser/quick-featured-images/tags/13.7.2/admin/class-Quick_Featured_Images_Columns.php#L506 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3376996%40quick-featured-images%2Ftrunk&old=3271680%40quick-featured-images%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2025-11177 State: PUBLISHED Published: 2025-10-15T08:25:54.794Z Last Updated: 2025-10-15T14:54:46.845Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: tbenyon Products: External Login Problem Types: CWE-89 Description: The External Login plugin for WordPress is vulnerable to SQL Injection via the 'log' parameter in all versions up to, and including, 1.11.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the
append additional SQL queries into already existing queries that can be used to extract sensitive information from the database when a PostgreSQL or MSSQL database is configured as the external authentication database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/488f1a2f-01c8-40cf-b52f-d707271105f5?source=cve - https://plugins.trac.wordpress.org/browser/external-login/tags/1.11.2/login/db.php#L153
CVE ID: CVE-2025-11178 State: PUBLISHED Published: 2025-09-30T14:52:20.711Z Last Updated: 2025-10-01T03:55:56.963Z Severity: HIGH (CVSS 7.3 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Acronis Products: Acronis True Image Problem Types: CWE-427 Description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis True Image (Windows) before build 42386. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-7078
CVE ID: CVE-2025-11182 State: PUBLISHED Published: 2025-10-02T05:15:06.469Z Last Updated: 2025-10-02T15:54:05.142Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: GTONE Products: ChangeFlow Problem Types: CWE-22, CWE-494 Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Download of Code Without Integrity Check vulnerability in GTONE ChangeFlow allows Path Traversal.This issue affects ChangeFlow: All versions to v9.0.1.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.gtone.co.kr/kr/application-lifecycle-management.php
CVE ID: CVE-2025-11183 State: PUBLISHED Published: 2025-10-13T09:17:52.854Z Last Updated: 2025-10-14T15:04:46.230Z Vendors: QGIS Products: QWC2 Problem Types: CWE-79 Description: Cross-Site Scripting vulnerability in attribute table in QGIS QWC2 <2025.08.14 allows an authorized attacker to plant arbitrary JavaScript code in the page Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hub.ntc.swiss/ntcf-2025-4286
CVE ID: CVE-2025-11184 State: PUBLISHED Published: 2025-10-13T09:20:35.946Z Last Updated: 2025-10-14T15:05:15.769Z Vendors: qwc-services Products: qwc-registration-gui Problem Types: CWE-79 Description: Cross-site scripting vulnerability in QGIS QWC2 Registration GUI <=v2025.03.31 allows an authorized attacker to plant arbitrary JavaScript code in the page Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hub.ntc.swiss/ntcf-2025-7724
CVE ID: CVE-2025-11186 State: PUBLISHED Published: 2025-11-22T05:07:42.720Z Last Updated: 2025-11-24T19:28:57.051Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: humanityco Products: Cookie Notice & Compliance for GDPR / CCPA Problem Types: CWE-79 Description: The Cookie Notice & Compliance for GDPR / CCPA plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's cookies_accepted shortcode in all versions up to, and including, 2.5.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary we
tes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/19700658-1bef-4e85-a995-d86fff508cdf?source=cve - https://plugins.trac.wordpress.org/browser/cookie-notice/tags/2.5.7/cookie-notice.php#L1060 - https://plugins.trac.wordpress.org/browser/cookie-notice/tags/2.5.7/cookie-notice.php#L1181
CVE ID: CVE-2025-11188 State: PUBLISHED Published: 2025-10-10T11:02:46.192Z Last Updated: 2025-11-03T17:31:39.369Z Vendors: Synchroweb Products: Kiwire Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Kiwire Captive Portal contains a blind SQL injection in the nas-id parameter, allowing for SQL commands to be issued and to compromise the corresponding database. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synchroweb.com/release-notes/kiwire/security
CVE ID: CVE-2025-11189 State: PUBLISHED Published: 2025-10-10T11:03:08.401Z Last Updated: 2025-11-03T17:31:40.304Z Vendors: Synchroweb Products: Kiwire Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Kiwire Captive Portal contains a reflected cross-site scripting (XSS) vulnerability within the login-url parameter, allowing for Javascript execution. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synchroweb.com/release-notes/kiwire/security
CVE ID: CVE-2025-11190 State: PUBLISHED Published: 2025-10-10T11:03:33.596Z Last Updated: 2025-11-03T17:31:41.247Z Vendors: Synchroweb Products: Kiwire Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The Kiwire Captive Portal contains an open redirection issue via the login-url parameter, allowing an attacker to redirect users to an attacker controlled website. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.synchroweb.com/release-notes/kiwire/security
CVE ID: CVE-2025-11191 State: PUBLISHED Published: 2025-10-31T06:00:03.402Z Last Updated: 2025-10-31T14:03:01.749Z Vendors: Unknown Products: RealPress Problem Types: CWE-862 Missing Authorization Description: The RealPress WordPress plugin before 1.1.0 registers the REST routes without proper permission checks, allowing the creation of pages and sending of emails from the site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/74f19ff2-d5c0-4bd4-83f2-688ea37022b1/
CVE ID: CVE-2025-11192 State: PUBLISHED Published: 2025-10-07T19:07:45.086Z Last Updated: 2025-10-08T15:45:56.015Z Vendors: Extreme Networks Products: Fabric Engine (VOSS) Problem Types: CWE-287 Description: A vulnerability in Extreme Networks’ Fabric Engine (VOSS) before 9.3 was discovered. When SD-WAN AutoSense is enabled on a port, it may automatically configure fabric connectivity without validating ISIS authentication settings. The SD-WAN AutoSense implementation may be exploited by malicious actors by allowing unauthorized access to network fabric and configuration data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://extreme-networks.my.site.com/ExtrArticleDet
ta. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://extreme-networks.my.site.com/ExtrArticleDetail?an=000130291
CVE ID: CVE-2025-11193 State: PUBLISHED Published: 2025-11-03T21:40:32.038Z Last Updated: 2025-11-03T21:47:52.661Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Lenovo Products: Tab M11 TB330FU TB330XU, Tab K11 TB330FU TB330FUP TB330XU TB330XUP, Idea Tab Pro TB373FU, Tab WiFi 5G, Tab K9 TB305FU, Tab K9 TB305XU, Tab Plus TB520FU, Tab M8 4th Gen 2024 TB301FU TB301XU, Tab Extreme TB570ZU TB570FU, Tab M10 5G TB360ZU, Tab M8 4th Gen TB300FU TB300XU, Tab M9 TB310FU TB310XU, Tab P11 2nd Gen TB350XU TB350FU, Tab P12 TB370FU TB372FU, Tab WIFI, Tab K11 Plus LTE TB352FU TB352XU, Tab K11 Plus WIFI TB352FU, Yoga Tab Plus TB520FU, Tab One TB305FUXU Problem Types: CWE-25
K11 Plus LTE TB352FU TB352XU, Tab K11 Plus WIFI TB352FU, Yoga Tab Plus TB520FU, Tab One TB305FUXU Problem Types: CWE-256 Description: A potential vulnerability was reported in some Lenovo Tablets that could allow a local authenticated user or application to gain access to sensitive device specific information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-202383
CVE ID: CVE-2025-11195 State: PUBLISHED Published: 2025-09-30T18:12:50.204Z Last Updated: 2025-09-30T20:33:45.909Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: Rapid7 Products: AppSpider Pro Problem Types: CWE-20, CWE-345 Description: Rapid7 AppSpider Pro versions below 7.5.021 suffer from a project name validation vulnerability, whereby an attacker can change the project name directly in the configuration file to a name that already exists. This issue stems from a lack of effective verification of the uniqueness of project names when editing them outside the application in affected versions. This vulnerability was remediated in version 7.5.021 of the produc
ng them outside the application in affected versions. This vulnerability was remediated in version 7.5.021 of the product. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://docs.rapid7.com/insight/releasenotes-2025sep/#application-security-insightappsec-and-appspider
CVE ID: CVE-2025-11196 State: PUBLISHED Published: 2025-10-15T08:26:02.148Z Last Updated: 2025-10-15T14:16:16.320Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: tbenyon Products: External Login Problem Types: CWE-200 Description: The External Login plugin for WordPress is vulnerable to sensitive information exposure in all versions up to, and including, 1.11.2 due to the 'exlog_test_connection' AJAX action lacking capability checks or nonce validation. This makes it possible for authenticated attackers, with subscriber-level access and above, to query the configured external database and retrieve truncated usernames, email addresses, and password hashes vi
ove, to query the configured external database and retrieve truncated usernames, email addresses, and password hashes via the diagnostic test results view. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bdb40f51-dac2-40e7-beb1-154d982f7af3?source=cve - https://plugins.trac.wordpress.org/browser/external-login/trunk/options/testing_ajax.php#L3 - https://plugins.trac.wordpress.org/browser/external-login/trunk/login/db.php#L215 - https://plugins.trac.wordpress.org/browser/external-login/trunk/views/test_results.php#L21
CVE ID: CVE-2025-11197 State: PUBLISHED Published: 2025-10-11T07:25:56.898Z Last Updated: 2025-10-14T14:12:30.722Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: dartiss Products: Draft List Problem Types: CWE-79 Description: The Draft List plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'drafts' shortcode in all versions up to, and including, 2.6.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected p
evel access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4711e3d5-b70c-413e-97e7-6d2e93e8217e?source=cve - https://github.com/dartiss/draft-list/pull/81/files - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3376385%40simple-draft-list&new=3376385%40simple-draft-list&sfp_email=&sfph_mail=
CVE ID: CVE-2025-11198 State: PUBLISHED Published: 2025-10-09T15:39:28.578Z Last Updated: 2025-10-09T19:49:45.941Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N) Vendors: Juniper Networks Products: Security Director Policy Enforcer Problem Types: CWE-306 Description: A Missing Authentication for Critical Function vulnerability in Juniper Networks Security Director Policy Enforcer allows an unauthenticated, network-based attacker to replace legitimate vSRX images with malicious ones. If a trusted user initiates deployment, Security Director Policy Enforcer will deliver the attacker's uploaded image to VMware NSX instead of a legitimate one. This issue affects Security
orcer will deliver the attacker's uploaded image to VMware NSX instead of a legitimate one. This issue affects Security Director Policy Enforcer: * All versions before 23.1R1 Hotpatch v3. This issue does not affect Junos Space Security Director Insights. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://supportportal.juniper.net/JSA103437
CVE ID: CVE-2025-11200 State: PUBLISHED Published: 2025-10-29T19:42:03.734Z Last Updated: 2025-10-31T03:55:31.971Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: MLflow Products: MLflow Problem Types: CWE-521 Description: MLflow Weak Password Requirements Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of passwords. The issue results from weak password requirements. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-2
password requirements. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26916. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-932/ - https://github.com/mlflow/mlflow/commit/1f74f3f24d8273927b8db392c23e108576936c54
CVE ID: CVE-2025-11201 State: PUBLISHED Published: 2025-10-29T19:37:10.690Z Last Updated: 2025-10-31T03:55:31.166Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: MLflow Products: MLflow Problem Types: CWE-22 Description: MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of MLflow Tracking Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of model file paths. The issue results from the lack of proper validation of a user-supplied path prior to using it in fil
model file paths. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-26921. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-931/ - https://github.com/B-Step62/mlflow/commit/2e02bc7bb70df243e6eb792689d9b8eba0013161
CVE ID: CVE-2025-11202 State: PUBLISHED Published: 2025-10-29T19:36:39.563Z Last Updated: 2025-10-30T14:35:53.727Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: win-cli-mcp-server Products: win-cli-mcp-server Problem Types: CWE-78 Description: win-cli-mcp-server resolveCommandPath Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of win-cli-mcp-server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the implementation of the resolveCommandPath method. The issue results from the lack of proper validation of a us
within the implementation of the resolveCommandPath method. The issue results from the lack of proper validation of a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-27787. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-930/ - https://github.com/simon-ami/win-cli-mcp-server/commit/521b4a34190d03bde7d433d213c36357181a6d09
CVE ID: CVE-2025-11203 State: PUBLISHED Published: 2025-10-29T19:32:10.609Z Last Updated: 2025-10-30T17:38:56.644Z Severity: LOW (CVSS 3.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N) Vendors: LiteLLM Products: LiteLLM Problem Types: CWE-200 Description: LiteLLM Information health API_KEY Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of LiteLLM. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of the API_KEY parameter provided to the health endpoint. The issue results from exposing sensitive information to an unauthorized actor. An attacker can
to the health endpoint. The issue results from exposing sensitive information to an unauthorized actor. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-26585. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-929/ - https://docs.litellm.ai/release_notes/v1.63.14-stable
CVE ID: CVE-2025-11204 State: PUBLISHED Published: 2025-10-08T04:23:40.019Z Last Updated: 2025-10-08T15:42:48.759Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: metagauss Products: RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login Problem Types: CWE-89 Description: The RegistrationMagic – Custom Registration Forms, User Registration, Payment, and User Login plugin for WordPress is vulnerable to SQL Injection in all versions up to, and including, 6.0.6.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attac
d parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrator access or higher, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. An unauthenticated attacker could utilize an injected Cross-Site Scripting via user-agent on form submission to leverage this to achieve Reflected Cross-Site Scripting. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4532cb38-453b-460c-879d-6f0e1caacafc?source=cve - https://plugins.trac.wordpress.org/browser/custom-registration-
ies/id/4532cb38-453b-460c-879d-6f0e1caacafc?source=cve - https://plugins.trac.wordpress.org/browser/custom-registration-form-builder-with-submission-manager/trunk/services/class_rm_reports_service.php?rev=3360241 - https://wordpress.org/plugins/custom-registration-form-builder-with-submission-manager/ - https://plugins.trac.wordpress.org/changeset/3374106/custom-registration-form-builder-with-submission-manager/trunk?contextall=1&old=3366909&old_path=%2Fcustom-registration-form-builder-with-submission-manager%2Ftrunk
CVE ID: CVE-2025-11205 State: PUBLISHED Published: 2025-11-06T22:08:52.920Z Last Updated: 2025-11-08T04:55:16.818Z Vendors: Google Products: Chrome Problem Types: CWE-122 Description: Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/442444724
CVE ID: CVE-2025-11206 State: PUBLISHED Published: 2025-11-06T22:08:53.382Z Last Updated: 2025-11-08T04:55:16.020Z Vendors: Google Products: Chrome Problem Types: CWE-122 Description: Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2025/09/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/444755026