CWE-1300 · 36 records
Improper Protection of Physical Side Channels
CVEs in this class
36 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2025-10890No exploit | Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a crgoogle · chrome · CWE-1300 | Critical9.1 | — | 0.3% | Sep 24, 2025 |
36Monitor | CVE-2026-11153No exploit | Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a google · chrome · CWE-1300 | Critical9.1 | — | 0.2% | Jun 4, 2026 |
32Monitor | CVE-2023-6258No exploit | Pkcs11-provider: side-channel proofing pkcs#1 1.5 pathslatchset · pkcs11-provider · CWE-1300 | High8.1 | — | 0.5% | Jan 30, 2024 |
26Monitor | CVE-2026-14074No exploit | Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak crossgoogle · chrome · CWE-1300 | Medium6.5 | — | 0.3% | Jun 30, 2026 |
26Monitor | CVE-2026-14085No exploit | Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a crgoogle · chrome · CWE-1300 | Medium6.5 | — | 0.3% | Jun 30, 2026 |
26Monitor | CVE-2026-13935No exploit | Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin dgoogle · chrome · CWE-1300 | Medium6.5 | — | 0.3% | Jun 30, 2026 |
26Monitor | CVE-2026-13922No exploit | Side-channel information leakage in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a google · chrome · CWE-1300 | Medium6.5 | — | 0.3% | Jun 30, 2026 |
26Monitor | CVE-2026-17800No exploit | Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensigoogle · chrome · CWE-1300 | Medium6.5 | — | 0.3% | Jul 30, 2026 |
26Monitor | CVE-2026-17796No exploit | Side-channel information leakage in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive google · chrome · CWE-1300 | Medium6.5 | — | 0.3% | Jul 30, 2026 |
26Monitor | CVE-2026-13790No exploit | Side-channel information leakage in Scroll in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via agoogle · chrome · CWE-1300 | Medium6.5 | — | 0.3% | Jun 30, 2026 |
26Monitor | CVE-2026-13809No exploit | Side-channel information leakage in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromisgoogle · chrome · CWE-1300 | Medium6.5 | — | 0.2% | Jun 30, 2026 |
26Monitor | CVE-2026-14071No exploit | Side-channel information leakage in WebAudio in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data viagoogle · chrome · CWE-1300 | Medium6.5 | — | 0.2% | Jun 30, 2026 |
26Monitor | CVE-2025-11207No exploit | Side-channel information leakage in Storage in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform arbitrary read/writgoogle · chrome · CWE-1300 | Medium6.5 | — | 0.2% | Nov 6, 2025 |
26Monitor | CVE-2026-5876No exploit | Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data vgoogle · chrome · CWE-1300 | Medium6.5 | — | 0.2% | Apr 8, 2026 |
26Monitor | CVE-2026-11284No exploit | Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin dgoogle · chrome · CWE-1300 | Medium6.5 | — | 0.2% | Jun 4, 2026 |
26Monitor | CVE-2026-11289No exploit | Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a google · chrome · CWE-1300 | Medium6.5 | — | 0.1% | Jun 4, 2026 |
22Monitor | CVE-2026-89172No exploit | Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithmsmicrochip · an1044 · CWE-1300 | Medium5.6 | — | 0.2% | Sep 12, 2026 |
21Monitor | CVE-2026-17978No exploit | Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitgoogle · chrome · CWE-1300 | Medium5.3 | — | 0.2% | Jul 30, 2026 |
21Monitor | CVE-2026-14012No exploit | Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive ingoogle · chrome · CWE-1300 | Medium5.3 | — | 0.2% | Jun 30, 2026 |
21Monitor | CVE-2025-11210No exploit | Side-channel information leakage in Tab in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in google · chrome · CWE-1300 | Medium5.4 | — | 0.2% | Nov 6, 2025 |
21Monitor | CVE-2026-17914No exploit | Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive igoogle · chrome · CWE-1300 | Medium5.3 | — | 0.2% | Jul 30, 2026 |
18Monitor | CVE-2025-13992No exploit | Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site google · chrome · CWE-1300 | Medium4.7 | — | 0.2% | Dec 3, 2025 |
17Monitor | CVE-2026-17907No exploit | Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via google · chrome · CWE-1300 | Medium4.3 | — | 0.2% | Jul 30, 2026 |
17Monitor | CVE-2026-17942No exploit | Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a crgoogle · chrome · CWE-1300 | Medium4.3 | — | 0.2% | Jul 30, 2026 |
17Monitor | CVE-2026-18019No exploit | Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a google · chrome · CWE-1300 | Medium4.3 | — | 0.2% | Jul 30, 2026 |
- CVE-2025-1089036Monitor
Side-channel information leakage in V8 in Google Chrome prior to 140.0.7339.207 allowed a remote attacker to leak cross-origin data via a cr
CriticalCVSS 9.1No exploitEPSS 0%google · chromeSep 24, 2025
- CVE-2026-1115336Monitor
Side-channel information leakage in Forms in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a
CriticalCVSS 9.1No exploitEPSS 0%google · chromeJun 4, 2026
- CVE-2023-625832Monitor
Pkcs11-provider: side-channel proofing pkcs#1 1.5 paths
HighCVSS 8.1No exploitEPSS 0%latchset · pkcs11-providerJan 30, 2024
- CVE-2026-1407426Monitor
Side-channel information leakage in WebAuthentication in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker to leak cross
MediumCVSS 6.5No exploitEPSS 0%google · chromeJun 30, 2026
- CVE-2026-1408526Monitor
Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a cr
MediumCVSS 6.5No exploitEPSS 0%google · chromeJun 30, 2026
- CVE-2026-1393526Monitor
Side-channel information leakage in ComputePressure in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin d
MediumCVSS 6.5No exploitEPSS 0%google · chromeJun 30, 2026
- CVE-2026-1392226Monitor
Side-channel information leakage in Paint in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a
MediumCVSS 6.5No exploitEPSS 0%google · chromeJun 30, 2026
- CVE-2026-1780026Monitor
Inappropriate implementation in MediaRecording in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensi
MediumCVSS 6.5No exploitEPSS 0%google · chromeJul 30, 2026
- CVE-2026-1779626Monitor
Side-channel information leakage in WebXR in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive
MediumCVSS 6.5No exploitEPSS 0%google · chromeJul 30, 2026
- CVE-2026-1379026Monitor
Side-channel information leakage in Scroll in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via a
MediumCVSS 6.5No exploitEPSS 0%google · chromeJun 30, 2026
- CVE-2026-1380926Monitor
Side-channel information leakage in Safe Browsing in Google Chrome on iOS prior to 150.0.7871.47 allowed a remote attacker who had compromis
MediumCVSS 6.5No exploitEPSS 0%google · chromeJun 30, 2026
- CVE-2026-1407126Monitor
Side-channel information leakage in WebAudio in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to leak cross-origin data via
MediumCVSS 6.5No exploitEPSS 0%google · chromeJun 30, 2026
- CVE-2025-1120726Monitor
Side-channel information leakage in Storage in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform arbitrary read/writ
MediumCVSS 6.5No exploitEPSS 0%google · chromeNov 6, 2025
- CVE-2026-587626Monitor
Side-channel information leakage in Navigation in Google Chrome prior to 147.0.7727.55 allowed a remote attacker to leak cross-origin data v
MediumCVSS 6.5No exploitEPSS 0%google · chromeApr 8, 2026
- CVE-2026-1128426Monitor
Side-channel information leakage in PerformanceAPIs in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin d
MediumCVSS 6.5No exploitEPSS 0%google · chromeJun 4, 2026
- CVE-2026-1128926Monitor
Side-channel information leakage in Paint in Google Chrome prior to 149.0.7827.53 allowed a remote attacker to leak cross-origin data via a
MediumCVSS 6.5No exploitEPSS 0%google · chromeJun 4, 2026
- CVE-2026-8917222Monitor
Side-channel attack of AN1044/AN953/SW300052 cryptographic algorithms
MediumCVSS 5.6No exploitEPSS 0%microchip · an1044Sep 12, 2026
- CVE-2026-1797821Monitor
Side-channel information leakage in WebCodecs in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensit
MediumCVSS 5.3No exploitEPSS 0%google · chromeJul 30, 2026
- CVE-2026-1401221Monitor
Side-channel information leakage in CSS in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive in
MediumCVSS 5.3No exploitEPSS 0%google · chromeJun 30, 2026
- CVE-2025-1121021Monitor
Side-channel information leakage in Tab in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in
MediumCVSS 5.4No exploitEPSS 0%google · chromeNov 6, 2025
- CVE-2026-1791421Monitor
Side-channel information leakage in Skia in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to obtain potentially sensitive i
MediumCVSS 5.3No exploitEPSS 0%google · chromeJul 30, 2026
- CVE-2025-1399218Monitor
Side-channel information leakage in Navigation and Loading in Google Chrome prior to 139.0.7258.66 allowed a remote attacker to bypass site
MediumCVSS 4.7No exploitEPSS 0%google · chromeDec 3, 2025
- CVE-2026-1790717Monitor
Side-channel information leakage in Network in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via
MediumCVSS 4.3No exploitEPSS 0%google · chromeJul 30, 2026
- CVE-2026-1794217Monitor
Side-channel information leakage in SVG in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a cr
MediumCVSS 4.3No exploitEPSS 0%google · chromeJul 30, 2026
- CVE-2026-1801917Monitor
Side-channel information leakage in Media in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to leak cross-origin data via a
MediumCVSS 4.3No exploitEPSS 0%google · chromeJul 30, 2026