CWE-221 · Other weaknesses
Information Loss or Omission
8CVEs
SortMost likely exploited
8 CVEs with CWE-221 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2026-113108Information loss in Script in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Medi…Google · Chrome · CVSS 8.8 · 2026-10-20 | 8.8 | 0.4% | 2026-10-20 |
| CVE-2026-113026Information loss in PDF in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security sev…Google · Chrome · CVSS 6.5 · 2026-10-20 | 6.5 | 0.4% | 2026-10-20 |
| CVE-2026-113238Information loss in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Ch…Google · Chrome · CVSS 8.8 · 2026-10-20 | 8.8 | 0.4% | 2026-10-20 |
| CVE-2026-87535Information loss or omission in Safebrowsing in Google Chrome on on Mac prior to 153.0.8010.36 allowed a remote attacker to bypass system access restrictions via a crafted HTML pa…Google · Chrome · CVSS 6.5 · 2026-09-09 | 6.5 | 0.3% | 2026-09-09 |
| CVE-2026-121134Information loss in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security sever…Google · Chrome · CVSS 8.8 · 2026-11-03 | 8.8 | 0.3% | 2026-11-03 |
| CVE-2025-62306HCL IntelliOps Event Management is affected by multiple security vulnerabilities.HCL Software · IEM · CVSS 5 · 2026-08-20 | 5.0 | 0.3% | 2026-08-20 |
| CVE-2026-76027Information loss in CacheStorage in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to obtain cross-origin data via a crafted HTML page. (Chromium security severity…Google · Chrome · CVSS 4.3 · 2026-10-30 | 4.3 | 0.2% | 2026-10-30 |
| CVE-2026-106287Information loss in CORS in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to bypass web origin policy via crafted network traffic. (Chromium security severity: Lo…Google · Chrome · CVSS 4.3 · 2026-10-06 | 4.3 | 0.2% | 2026-10-06 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.