https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 22:13:32 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-09939 bdu:2025-09939 https://cve.radiocsirt.org/vuln/bdu:2025-09939 https://cve.radiocsirt.org/vuln/fkie_cve-2025-34090 <p>Rejected reason: Neither filed by Chrome nor a valid security vulnerability.</p> <p>Rejected reason: Neither filed by Chrome nor a valid security vulnerability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-34090 https://cve.radiocsirt.org/vuln/ghsa-763x-q553-5w8v <p>A security bypass vulnerability exists in Google Chrome AppBound cookie encryption mechanism due to insufficient validation of COM server paths during inter-process communication. A local low-privileged attacker can hijack the COM class identifier (CLSID) registration used by Chrome&#39;s elevation service and point it to a non-existent or malicious binary. When this hijack occurs, Chrome silently falls back to the legacy cookie encryption mechanism (protected only by user-DPAPI), thereby enabling cookie decryption by any user-context malware without SYSTEM-level access. This flaw bypasses the protections intended by the AppBound encryption design and allows cookie theft from Chromium-based browsers.</p> <p>Confirmed in Google Chrome with AppBound Encryption enabled. Other Chromium-based browsers may be affected if they implement similar COM-based encryption mechanisms.</p> <p>A security bypass vulnerability exists in Google Chrome AppBound cookie encryption mechanism due to insufficient validation of COM server paths during inter-process communication. A local low-privileged attacker can hijack the COM class identifier (CLSID) registration used by Chrome&#39;s elevation service and point it to a non-existent or malicious binary. When this hijack occurs, Chrome silently falls back to the legacy cookie encryption mechanism (protected only by user-DPAPI), thereby enabling cookie decryption by any user-context malware without SYSTEM-level access. This flaw bypasses the protections intended by the AppBound encryption design and allows cookie theft from Chromium-based browsers.</p> <p>Confirmed in Google Chrome with AppBound Encryption enabled. Other Chromium-based browsers may be affected if they implement similar COM-based encryption mechanisms.</p> https://cve.radiocsirt.org/vuln/ghsa-763x-q553-5w8v https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1454 <p>Ein Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Google Chrome ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1454