CWE-1300 · Information Disclosure
Improper Protection of Physical Side Channels
36CVEs
SortMost likely exploited
36 CVEs with CWE-1300 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-6258Pkcs11-provider: side-channel proofing pkcs#1 1.5 pathsLatchset · pkcs11-provider · CVSS 8.1 · 2024-01-30 | 8.1 | 0.6% | 2024-01-30 |
| CVE-2025-10890Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev…Google · Chrome · CVSS 9.1 · 2025-09-24 | 9.1 | 0.4% | 2025-09-24 |
| CVE-2026-14074Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (…Google · Chrome · CVSS 6.5 · 2026-06-30 | 6.5 | 0.4% | 2026-06-30 |
| CVE-2026-17800Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory vi…Google · Chrome · CVSS 6.5 · 2026-07-30 | 6.5 | 0.3% | 2026-07-30 |
| CVE-2026-17796Side-channel information leakage in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a c…Google · Chrome · CVSS 6.5 · 2026-07-30 | 6.5 | 0.3% | 2026-07-30 |
| CVE-2026-14085Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev…Google · Chrome · CVSS 6.5 · 2026-06-30 | 6.5 | 0.3% | 2026-06-30 |
| CVE-2026-13935Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium…Google · Chrome · CVSS 6.5 · 2026-06-30 | 6.5 | 0.3% | 2026-06-30 |
| CVE-2026-13922Side-channel information leakage in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s…Google · Chrome · CVSS 6.5 · 2026-06-30 | 6.5 | 0.3% | 2026-06-30 |
| CVE-2026-13790Side-channel information leakage in Scroll in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security…Google · Chrome · CVSS 6.5 · 2026-06-30 | 6.5 | 0.3% | 2026-06-30 |
| CVE-2026-14071Side-channel information leakage in WebAudio in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium securit…Google · Chrome · CVSS 6.5 · 2026-06-30 | 6.5 | 0.3% | 2026-06-30 |
| CVE-2026-13809Side-channel information leakage in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to leak cross-o…Google · Chrome · CVSS 6.5 · 2026-06-30 | 6.5 | 0.3% | 2026-06-30 |
| CVE-2026-17978Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via…Google · Chrome · CVSS 5.3 · 2026-07-30 | 5.3 | 0.3% | 2026-07-30 |
| CVE-2025-11207Side-channel information leakage in Storage in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium se…Google · Chrome · CVSS 6.5 · 2025-11-06 | 6.5 | 0.3% | 2025-11-06 |
| CVE-2026-14012Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a cra…Google · Chrome · CVSS 5.3 · 2026-06-30 | 5.3 | 0.3% | 2026-06-30 |
| CVE-2026-11153Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s…Google · Chrome · CVSS 9.1 · 2026-06-04 | 9.1 | 0.3% | 2026-06-04 |
| CVE-2026-18019Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s…Google · Chrome · CVSS 4.3 · 2026-07-30 | 4.3 | 0.3% | 2026-07-30 |
| CVE-2026-17942Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security sev…Google · Chrome · CVSS 4.3 · 2026-07-30 | 4.3 | 0.3% | 2026-07-30 |
| CVE-2026-17907Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security…Google · Chrome · CVSS 4.3 · 2026-07-30 | 4.3 | 0.3% | 2026-07-30 |
| CVE-2026-17859Inappropriate implementation in Favicons in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security se…Google · Chrome · CVSS 4.3 · 2026-07-30 | 4.3 | 0.3% | 2026-07-30 |
| CVE-2026-17851Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to leak cross-origin data v…Google · Chrome · CVSS 4.3 · 2026-07-30 | 4.3 | 0.3% | 2026-07-30 |
| CVE-2026-17802Side-channel information leakage in GPU in Google Chrome on Android prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s…Google · Chrome · CVSS 4.3 · 2026-07-30 | 4.3 | 0.3% | 2026-07-30 |
| CVE-2026-17760Side-channel information leakage in NoStatePrefetch in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium…Google · Chrome · CVSS 4.3 · 2026-07-30 | 4.3 | 0.3% | 2026-07-30 |
| CVE-2026-17730Side-channel information leakage in Autofill in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who convinced a user to engage in specific UI gestures to leak cross…Google · Chrome · CVSS 4.3 · 2026-07-30 | 4.3 | 0.3% | 2026-07-30 |
| CVE-2026-17696Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s…Google · Chrome · CVSS 4.3 · 2026-07-30 | 4.3 | 0.3% | 2026-07-30 |
| CVE-2026-5876Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secur…Google · Chrome · CVSS 6.5 · 2026-04-08 | 6.5 | 0.3% | 2026-04-08 |
| CVE-2026-11284Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium…Google · Chrome · CVSS 6.5 · 2026-06-04 | 6.5 | 0.2% | 2026-06-04 |
| CVE-2025-11210Side-channel information leakage in Tab in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoo…Google · Chrome · CVSS 5.4 · 2025-11-06 | 5.4 | 0.2% | 2025-11-06 |
| CVE-2026-17914Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a cr…Google · Chrome · CVSS 5.3 · 2026-07-30 | 5.3 | 0.2% | 2026-07-30 |
| CVE-2025-13992Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chr…Google · Chrome · CVSS 4.7 · 2025-12-03 | 4.7 | 0.2% | 2025-12-03 |
| CVE-2026-89172Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithmsMicrochip · AN1044 · CVSS 5.6 · 2026-09-12 | 5.6 | 0.2% | 2026-09-12 |
| CVE-2026-11289Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s…Google · Chrome · CVSS 6.5 · 2026-06-04 | 6.5 | 0.2% | 2026-06-04 |
| CVE-2026-3929Side-channel information leakage in ResourceTiming in Google Chrome prior to 146.0.7680.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium s…Google · Chrome · CVSS 3.1 · 2026-03-11 | 3.1 | 0.2% | 2026-03-11 |
| CVE-2026-8562Side-channel information leakage in Navigation in Google Chrome prior to 148.0.7778.168 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium secu…Google · Chrome · CVSS 4.3 · 2026-05-14 | 4.3 | 0.2% | 2026-05-14 |
| CVE-2026-8017Side-channel information leakage in Media in Google Chrome prior to 148.0.7778.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page. (Chromium security s…Google · Chrome · CVSS 3.1 · 2026-05-06 | 3.1 | 0.1% | 2026-05-06 |
| CVE-2026-6923Nuvoton - CWE-1300: Improper Protection of Physical Side ChannelsNuvoton · NPCT7xx · CVSS 3.8 · 2026-05-14 | 3.8 | 0.1% | 2026-05-14 |
| CVE-2026-0115In Trusted Execution Environment, there is a possible key leak due to side channel information disclosure. This could lead to physical information disclosure with no additional ex…Google · Android · CVSS 2.1 · 2026-03-10 | 2.1 | 0.1% | 2026-03-10 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.