Skip to content
BackEsc
Sign in

CWE-1300 · weakness in Information Disclosure

Improper Protection of Physical Side Channels

36 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 36 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Pkcs11-provider: side-channel proofing pkcs#1 1.5 pathsCVE-2023-6258Latchset · CVSS 8.1 · 0.6% likely

    Latchset

  2. Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev…CVE-2025-10890Google · CVSS 9.1 · 0.4% likely

    Google

  3. Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (…CVE-2026-14074Google · CVSS 6.5 · 0.4% likely

    Google

  4. Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory vi…CVE-2026-17800Google · CVSS 6.5 · 0.3% likely

    Google

  5. Side-channel information leakage in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a c…CVE-2026-17796Google · CVSS 6.5 · 0.3% likely

    Google

  6. Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev…CVE-2026-14085Google · CVSS 6.5 · 0.3% likely

    Google

  7. Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium…CVE-2026-13935Google · CVSS 6.5 · 0.3% likely

    Google

  8. Side-channel information leakage in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s…CVE-2026-13922Google · CVSS 6.5 · 0.3% likely

    Google

  9. Side-channel information leakage in Scroll in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security…CVE-2026-13790Google · CVSS 6.5 · 0.3% likely

    Google

  10. Side-channel information leakage in WebAudio in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit…CVE-2026-14071Google · CVSS 6.5 · 0.3% likely

    Google

  11. Side-channel information leakage in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-o…CVE-2026-13809Google · CVSS 6.5 · 0.3% likely

    Google

  12. Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via…CVE-2026-17978Google · CVSS 5.3 · 0.3% likely

    Google

  13. Side-channel information leakage in Storage in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium se…CVE-2025-11207Google · CVSS 6.5 · 0.3% likely

    Google

  14. Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a cra…CVE-2026-14012Google · CVSS 5.3 · 0.3% likely

    Google

  15. Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s…CVE-2026-11153Google · CVSS 9.1 · 0.3% likely

    Google

  16. Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s…CVE-2026-18019Google · CVSS 4.3 · 0.3% likely

    Google

  17. Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev…CVE-2026-17942Google · CVSS 4.3 · 0.3% likely

    Google

  18. Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security…CVE-2026-17907Google · CVSS 4.3 · 0.3% likely

    Google

  19. Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se…CVE-2026-17859Google · CVSS 4.3 · 0.3% likely

    Google

  20. Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data v…CVE-2026-17851Google · CVSS 4.3 · 0.3% likely

    Google

  21. Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s…CVE-2026-17802Google · CVSS 4.3 · 0.3% likely

    Google

  22. Side-channel information leakage in NoStatePrefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium…CVE-2026-17760Google · CVSS 4.3 · 0.3% likely

    Google

  23. Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross…CVE-2026-17730Google · CVSS 4.3 · 0.3% likely

    Google

  24. Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s…CVE-2026-17696Google · CVSS 4.3 · 0.3% likely

    Google

  25. Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur…CVE-2026-5876Google · CVSS 6.5 · 0.3% likely

    Google

  26. Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium…CVE-2026-11284Google · CVSS 6.5 · 0.2% likely

    Google

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in