https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T16:51:25.606711+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2015-10505 bdu:2015-10505 2026-10-02T16:51:25.670146+00:00 bdu:2015-10505 https://cve.radiocsirt.org/vuln/cnvd-2015-04192 cnvd-2015-04192 2026-10-02T16:51:25.670189+00:00 cnvd-2015-04192 https://cve.radiocsirt.org/vuln/euvd-2026-90142 EUVD-2026-90142 2026-10-02T16:51:25.670205+00:00 EUVD-2026-90142 https://cve.radiocsirt.org/vuln/fkie_cve-2015-1269 fkie_cve-2015-1269 2026-10-02T16:51:25.670217+00:00

The DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before 43.0.2357.130 does not properly canonicalize DNS hostnames before making comparisons to HSTS or HPKP preload entries, which allows remote attackers to bypass intended access restrictions via a string that (1) ends in a . (dot) character or (2) is not entirely lowercase.

 https://cve.radiocsirt.org/vuln/ghsa-p88r-4rfm-cpwf GHSA-p88r-4rfm-cpwf 2026-10-02T16:51:25.670249+00:00

The DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before 43.0.2357.130 does not properly canonicalize DNS hostnames before making comparisons to HSTS or HPKP preload entries, which allows remote attackers to bypass intended access restrictions via a string that (1) ends in a . (dot) character or (2) is not entirely lowercase.

 https://cve.radiocsirt.org/vuln/gsd-2015-1269 gsd-2015-1269 2026-10-02T16:51:25.670271+00:00 gsd-2015-1269 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10171-1 openSUSE-SU-2024:10171-1 — chromedriver-55.0.2883.75-3.1 on GA media 2026-10-02T16:51:25.670282+00:00

chromedriver-55.0.2883.75-3.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2015:1188 RHSA-2015:1188 — Red Hat Security Advisory: chromium-browser security update 2026-10-02T16:51:25.670697+00:00

chromium-browser: Scheme validation error in WebUI chromium-browser: Cross-origin bypass in Blink chromium-browser: Cross-origin bypass in Blink chromium-browser: Normalization error in HSTS/HPKP preload list

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2015-1269 UBUNTU-CVE-2015-1269 2026-10-02T16:51:25.670718+00:00

Affected: Ubuntu:14.04:LTS: chromium-browser, Ubuntu:14.04:LTS: oxide-qt

The DecodeHSTSPreloadRaw function in net/http/transport_security_state.cc in Google Chrome before 43.0.2357.130 does not properly canonicalize DNS hostnames before making comparisons to HSTS or HPKP preload entries, which allows remote attackers to bypass intended access restrictions via a string that (1) ends in a . (dot) character or (2) is not entirely lowercase.