36 matches found
2 More Google Chrome Zero-Days Under Active Exploitation
Google is asking Chrome desktop users to prepare to update their browsers once again as two more zero-day vulnerabilities have been identified in the software. Both allow an unauthenticated, remote attacker to compromise an affected system via the web. And both are being actively exploited in the...
CVE-2020-16017
creationtimestamp| type| source ---|---|--- 2020-11-12 05:47:55+00:00| exploited| https://t.me/cKure/2775 2020-11-12 11:41:01+00:00| exploited| https://t.me/CyberGovIL/926 2020-11-13 13:41:34+00:00| seen| https://t.me/thesammymove/2824 2020-11-16 11:06:45+00:00| seen|...
Two New Chrome 0-Days Under Active Attacks – Update Your Browser
Google has patched two more zero-day flaws in the Chrome web browser for desktop, making it the fourth and fifth actively exploited vulnerabilities addressed by the search giant in recent weeks. The company released 86.0.4240.198 for Windows, Mac, and Linux, which it said will be rolling out over...
Google Chrome Security Update (stable-channel-update-for-desktop_11-2020-11) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
Google Releases Security Updates for Chrome
Google has released Chrome version 86.0.4240.198 for Windows, Mac, and Linux. This version addresses CVE-2020-16013 and CVE-2020-16017. An attacker could exploit one of these vulnerabilities to take control of an affected system. These vulnerabilities have been detected in exploits in the wild. T...
Stable Channel Update for Desktop
The stable channel has been updated to 86.0.4240.198 for Windows, Mac & Linux which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels?Find out how. If you find a new issue, please let us know by filing a bug. The...
Google Chrome < 86.0.4240.198 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 86.0.4240.198. It is, therefore, affected by multiple vulnerabilities as referenced in the 202011stable-channel-update-for-desktop11 advisory. - Use after free in site isolation in Google Chrome prior to 86.0.4240.198...
Google Chrome < 86.0.4240.198 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 86.0.4240.198. It is, therefore, affected by multiple vulnerabilities as referenced in the 202011stable-channel-update-for-desktop11 advisory. - Use after free in site isolation in Google Chrome prior to 86.0.4240.198...
KLA11993 Multiple vulnerabilities in Google Chrome
Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in V8 can be exploited to potentially cause denial of service. 2...
CVE-2019-16017
creationtimestamp| type| source ---|---|--- 2020-09-23 07:55:27+00:00| seen| https://t.me/cibsecurity/14830...
CVE-2018-16017
CVE-2018-16017 is an out-of-bounds read vulnerability in Adobe Acrobat and Reader. Affected builds include 2019.008.20081/20080, 2017.011.30106/30105, and 2015.006.30457/30456 and earlier; exploitation could lead to information disclosure. No remediation details are provided in the supplied docum...
CVE-2017-16017
creationtimestamp| type| source ---|---|--- 2018-11-09 17:45:55+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-wg96-3933-j2w5...
apostrophe-tumblr (>=0.5.1, <=0.5.13) potentially affected by CVE-2017-16017 via sanitize-html (1.1.4)
sanitize-html NPM version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on sanitize-html and may be impacted: - apostrophe-tumblr =0.5.1, =0.5.13 Source cves: CVE-2017-16017 Source advisory: OSV:GHSA-WG96-3933-J2W5...
CVE-2017-16017
sanitize-html is a library for scrubbing html input for malicious values Versions 1.2.2 and below have a cross site scripting vulnerability...
CVE-2017-16017
The CVE-2017-16017 entry concerns the sanitize-html library where versions 1.2.2 and earlier are vulnerable to cross-site scripting (XSS). The root cause is inadequate sanitization allowing attacker-controlled HTML/input to induce XSS, as documented in multiple sources (e.g., OSV GHSA entry and n...
