Monthly
Incorrect reference resolution in the CustomTabs component of Google Chrome for Android (all versions prior to 152.0.7977.65) allows a remote, unauthenticated attacker to bypass Android system access restrictions by delivering a crafted HTML page. The integrity impact is limited (I:L, S:U) with no confidentiality or availability consequence. No public exploit code exists and exploitation status is confirmed as none by SSVC assessment, placing this squarely in standard patch-cycle priority rather than emergency response.
Incorrect reference resolution in the WebView component of Google Chrome on Android (versions prior to 152.0.7977.65) enables a remote attacker to potentially bypass the web origin policy by delivering a crafted HTML page. The flaw carries a Chromium-internal severity of Low, consistent with the limited confidentiality-only impact (C:L/I:N/A:N) reflected in the CVSS 4.3 score. No public exploit has been identified at time of analysis, and the EPSS score of 0.20% (10th percentile) confirms negligible current exploitation probability.
Site isolation bypass in Google Chrome's Speech component allows an attacker who has already established a foothold in the renderer process to cross origin boundaries via a crafted HTML page. Affected versions are all Chrome releases prior to 152.0.7977.65 across all platforms covered by the CPE cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*. No public exploit code has been identified at time of analysis, EPSS probability is very low at 0.20% (10th percentile), and the vulnerability is not listed in CISA KEV - however its value as a second-stage exploit in a browser attack chain elevates practical concern above the low CVSS score alone.
Web origin policy bypass in Google Chrome's cache component affects all versions prior to 152.0.7977.65, exploitable by a remote unauthenticated attacker who tricks a user into visiting a crafted HTML page. The incorrect reference resolution (CWE-706) in the cache layer allows cross-origin data to be read, constituting a Same-Origin Policy bypass with limited confidentiality impact. No active exploitation is confirmed and EPSS sits at 0.20% (10th percentile), indicating low real-world exploitation pressure at this time.
Incorrect reference resolution in Google Chrome's Passwords feature (versions prior to 152.0.7977.65) allows a remote attacker to bypass system access restrictions by delivering a crafted file that a user must open. The integrity impact is limited (CVSS I:L), and no confidentiality or availability loss is indicated. With EPSS at 0.36% (29th percentile), no KEV listing, and no public exploit identified at time of analysis, real-world exploitation risk is currently low despite the network-accessible attack vector.
Incorrect reference resolution in Chrome's Preload subsystem (versions prior to 152.0.7977.65) allows remote attackers to bypass the Same-Origin Policy by serving a crafted HTML page to a victim. The vulnerability is limited to confidentiality impact at the low tier - an attacker can read a constrained subset of cross-origin data but cannot modify content or cause a denial of service. No public exploit code has been identified and the EPSS score of 0.31% (23rd percentile) reflects low real-world exploitation probability at time of analysis.
Incorrect reference resolution in Chrome's Loader component prior to version 152.0.7977.65 enables unauthenticated remote attackers to bypass the browser's web origin policy via crafted network traffic, with user interaction required. The flaw (CWE-706) allows misattribution of resource origins, potentially exposing cross-origin data; CVSS rates impact as limited confidentiality loss only. With an EPSS of 0.30% at the 22nd percentile and no CISA KEV listing, exploitation appears theoretical at this time rather than actively occurring, though origin policy bypass is a meaningful primitive for targeted attacks.
Sandbox escape in Google Chrome's FileSystem component before version 152.0.7977.65 lets a remote attacker who lures a victim to a crafted HTML page potentially run arbitrary code outside the renderer sandbox. The flaw stems from incorrect reference resolution (CWE-706) and requires user interaction via social engineering. It is patched in the stable channel; there is no public exploit identified and EPSS exploitation probability is low (0.45%).
Authentication bypass in phpIPAM's REST API before 1.8.2 lets unauthenticated remote attackers obtain full API access by abusing an object-cache key collision, then wielding a numeric database row ID as a valid API token to read, write, and delete all IP address management records. VulnCheck reported the flaw and the vendor shipped a fix in 1.8.2; a patch commit is public, so publicly available exploit code exists in the sense of a documented, reproducible technique, though no active exploitation is confirmed. With a CVSS 4.0 base of 9.3 and no authentication or user interaction required, this is a high-priority issue for internet- or network-exposed phpIPAM instances.
Privilege elevation in Microsoft Azure Arc allows a remote, unauthenticated attacker to gain elevated privileges over a network by exploiting an incorrectly-resolved name or reference (CWE-706), rated the maximum CVSS 10.0 with a scope change. Reported by Microsoft with a fix available through the MSRC update guide; there is no public exploit identified at time of analysis and the issue is not listed in CISA KEV. Note a source conflict: the CVE description cites Azure Arc while the CPE and tags cite Azure Web Apps, so the exact affected surface should be confirmed with Microsoft.
Incorrect reference resolution in the CustomTabs component of Google Chrome for Android (all versions prior to 152.0.7977.65) allows a remote, unauthenticated attacker to bypass Android system access restrictions by delivering a crafted HTML page. The integrity impact is limited (I:L, S:U) with no confidentiality or availability consequence. No public exploit code exists and exploitation status is confirmed as none by SSVC assessment, placing this squarely in standard patch-cycle priority rather than emergency response.
Incorrect reference resolution in the WebView component of Google Chrome on Android (versions prior to 152.0.7977.65) enables a remote attacker to potentially bypass the web origin policy by delivering a crafted HTML page. The flaw carries a Chromium-internal severity of Low, consistent with the limited confidentiality-only impact (C:L/I:N/A:N) reflected in the CVSS 4.3 score. No public exploit has been identified at time of analysis, and the EPSS score of 0.20% (10th percentile) confirms negligible current exploitation probability.
Site isolation bypass in Google Chrome's Speech component allows an attacker who has already established a foothold in the renderer process to cross origin boundaries via a crafted HTML page. Affected versions are all Chrome releases prior to 152.0.7977.65 across all platforms covered by the CPE cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*. No public exploit code has been identified at time of analysis, EPSS probability is very low at 0.20% (10th percentile), and the vulnerability is not listed in CISA KEV - however its value as a second-stage exploit in a browser attack chain elevates practical concern above the low CVSS score alone.
Web origin policy bypass in Google Chrome's cache component affects all versions prior to 152.0.7977.65, exploitable by a remote unauthenticated attacker who tricks a user into visiting a crafted HTML page. The incorrect reference resolution (CWE-706) in the cache layer allows cross-origin data to be read, constituting a Same-Origin Policy bypass with limited confidentiality impact. No active exploitation is confirmed and EPSS sits at 0.20% (10th percentile), indicating low real-world exploitation pressure at this time.
Incorrect reference resolution in Google Chrome's Passwords feature (versions prior to 152.0.7977.65) allows a remote attacker to bypass system access restrictions by delivering a crafted file that a user must open. The integrity impact is limited (CVSS I:L), and no confidentiality or availability loss is indicated. With EPSS at 0.36% (29th percentile), no KEV listing, and no public exploit identified at time of analysis, real-world exploitation risk is currently low despite the network-accessible attack vector.
Incorrect reference resolution in Chrome's Preload subsystem (versions prior to 152.0.7977.65) allows remote attackers to bypass the Same-Origin Policy by serving a crafted HTML page to a victim. The vulnerability is limited to confidentiality impact at the low tier - an attacker can read a constrained subset of cross-origin data but cannot modify content or cause a denial of service. No public exploit code has been identified and the EPSS score of 0.31% (23rd percentile) reflects low real-world exploitation probability at time of analysis.
Incorrect reference resolution in Chrome's Loader component prior to version 152.0.7977.65 enables unauthenticated remote attackers to bypass the browser's web origin policy via crafted network traffic, with user interaction required. The flaw (CWE-706) allows misattribution of resource origins, potentially exposing cross-origin data; CVSS rates impact as limited confidentiality loss only. With an EPSS of 0.30% at the 22nd percentile and no CISA KEV listing, exploitation appears theoretical at this time rather than actively occurring, though origin policy bypass is a meaningful primitive for targeted attacks.
Sandbox escape in Google Chrome's FileSystem component before version 152.0.7977.65 lets a remote attacker who lures a victim to a crafted HTML page potentially run arbitrary code outside the renderer sandbox. The flaw stems from incorrect reference resolution (CWE-706) and requires user interaction via social engineering. It is patched in the stable channel; there is no public exploit identified and EPSS exploitation probability is low (0.45%).
Authentication bypass in phpIPAM's REST API before 1.8.2 lets unauthenticated remote attackers obtain full API access by abusing an object-cache key collision, then wielding a numeric database row ID as a valid API token to read, write, and delete all IP address management records. VulnCheck reported the flaw and the vendor shipped a fix in 1.8.2; a patch commit is public, so publicly available exploit code exists in the sense of a documented, reproducible technique, though no active exploitation is confirmed. With a CVSS 4.0 base of 9.3 and no authentication or user interaction required, this is a high-priority issue for internet- or network-exposed phpIPAM instances.
Privilege elevation in Microsoft Azure Arc allows a remote, unauthenticated attacker to gain elevated privileges over a network by exploiting an incorrectly-resolved name or reference (CWE-706), rated the maximum CVSS 10.0 with a scope change. Reported by Microsoft with a fix available through the MSRC update guide; there is no public exploit identified at time of analysis and the issue is not listed in CISA KEV. Note a source conflict: the CVE description cites Azure Arc while the CPE and tags cite Azure Web Apps, so the exact affected surface should be confirmed with Microsoft.