https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:53:09.846921+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-10517 bdu:2015-10517 2026-10-02T16:53:09.900231+00:00 bdu:2015-10517 https://cve.radiocsirt.org/vuln/cnvd-2015-04100 cnvd-2015-04100 2026-10-02T16:53:09.900294+00:00 cnvd-2015-04100 https://cve.radiocsirt.org/vuln/euvd-2026-90135 EUVD-2026-90135 2026-10-02T16:53:09.900312+00:00 EUVD-2026-90135 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1266 fkie_cve-2015-1266 2026-10-02T16:53:09.900324+00:00

content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows remote attackers to bypass intended access restrictions via a similar URL, as demonstrated by use of http://gpu when there is a WebUI class for handling chrome://gpu requests.

 https://cve.radiocsirt.org/vuln/ghsa-r47q-gp6w-mwhx GHSA-r47q-gp6w-mwhx 2026-10-02T16:53:09.900356+00:00

content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows remote attackers to bypass intended access restrictions via a similar URL, as demonstrated by use of http://gpu when there is a WebUI class for handling chrome://gpu requests.

 https://cve.radiocsirt.org/vuln/gsd-2015-1266 gsd-2015-1266 2026-10-02T16:53:09.900374+00:00 gsd-2015-1266 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10171-1 openSUSE-SU-2024:10171-1 — chromedriver-55.0.2883.75-3.1 on GA media 2026-10-02T16:53:09.900385+00:00

chromedriver-55.0.2883.75-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2015:1188 RHSA-2015:1188 — Red Hat Security Advisory: chromium-browser security update 2026-10-02T16:53:09.900770+00:00

chromium-browser: Scheme validation error in WebUI chromium-browser: Cross-origin bypass in Blink chromium-browser: Cross-origin bypass in Blink chromium-browser: Normalization error in HSTS/HPKP preload list

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1266 UBUNTU-CVE-2015-1266 2026-10-02T16:53:09.900792+00:00

Affected: Ubuntu:14.04:LTS: chromium-browser, Ubuntu:14.04:LTS: oxide-qt

content/browser/webui/content_web_ui_controller_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in determining whether a URL is associated with a WebUI SiteInstance, which allows remote attackers to bypass intended access restrictions via a similar URL, as demonstrated by use of http://gpu when there is a WebUI class for handling chrome://gpu requests.