https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:51:15.559269+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-09971 bdu:2015-09971 2026-10-02T16:51:15.623459+00:00 bdu:2015-09971 https://cve.radiocsirt.org/vuln/certfr-2015-avi-167 certfr-2015-avi-167 — De multiples vulnérabilités ont été corrigées dans <span class="textit">Google Chrome</span>. Elles permettent à un att… 2026-10-02T16:51:15.623505+00:00 certfr-2015-avi-167 https://cve.radiocsirt.org/vuln/cnvd-2015-02613 cnvd-2015-02613 2026-10-02T16:51:15.623526+00:00 cnvd-2015-02613 https://cve.radiocsirt.org/vuln/euvd-2026-90089 EUVD-2026-90089 2026-10-02T16:51:15.623539+00:00 EUVD-2026-90089 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1244 fkie_cve-2015-1244 2026-10-02T16:51:15.623549+00:00

The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.

 https://cve.radiocsirt.org/vuln/ghsa-g86g-ggjj-ppxm GHSA-g86g-ggjj-ppxm 2026-10-02T16:51:15.623580+00:00

The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.

 https://cve.radiocsirt.org/vuln/gsd-2015-1244 gsd-2015-1244 2026-10-02T16:51:15.623595+00:00 gsd-2015-1244 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10171-1 openSUSE-SU-2024:10171-1 — chromedriver-55.0.2883.75-3.1 on GA media 2026-10-02T16:51:15.623606+00:00

chromedriver-55.0.2883.75-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2015:0816 RHSA-2015:0816 — Red Hat Security Advisory: chromium-browser security update 2026-10-02T16:51:15.624007+00:00

chromium-browser: Cross-origin-bypass in HTML parser chromium-browser: Cross-origin-bypass in Blink chromium-browser: Use-after-free in IPC chromium-browser: Out-of-bounds write in Skia chromium-browser: Out-of-bounds read in WebGL chromium-browser: tap-jacking vulnerability chromium-browser: Type confusion in V8 chromium-browser: HSTS bypass in WebSockets chromium-browser: Use-after-free in PDFium chromium-browser: Out-of-bounds read in Blink chromium-browser: Scheme issues in OpenSearch chromium-browser: SafeBrowsing bypass chromium-browser: Various fixes from internal audits, fuzzing and other initiatives

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1244 UBUNTU-CVE-2015-1244 2026-10-02T16:51:15.624039+00:00

Affected: Ubuntu:14.04:LTS: chromium-browser, Ubuntu:14.04:LTS: oxide-qt

The URLRequest::GetHSTSRedirect function in url_request/url_request.cc in Google Chrome before 42.0.2311.90 does not replace the ws scheme with the wss scheme whenever an HSTS Policy is active, which makes it easier for remote attackers to obtain sensitive information by sniffing the network for WebSocket traffic.