Lucene search
+L

23 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 3:8 a.m.5 views

CVE-2023-21185

In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

7.8CVSS6.7AI score0.00088EPSS
SaveExploits0References1
NVD
NVD
added 2025/01/17 8:15 p.m.32 views

CVE-2025-21185

Microsoft Edge Chromium-based Elevation of Privilege Vulnerability...

6.5CVSS0.00803EPSS
SaveExploits0References1
Circl
Circl
added 2025/01/17 7:23 p.m.22 views

CVE-2025-21185

creationtimestamp| type| source ---|---|--- 2025-01-17 19:23:18+00:00| seen| https://infosec.exchange/users/cve/statuses/113845324887179561 2025-01-17 19:32:11+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113845359780799137 2025-01-17 19:56:47+00:00| seen|...

6.5CVSS5.7AI score0.00803EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/01/17 7:19 p.m.42 views

CVE-2025-21185 Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

...

6.5CVSS0.00803EPSS
SaveExploits0References1
CVE
CVE
added 2025/01/17 7:19 p.m.144 views

CVE-2025-21185

Microsoft Edge (Chromium-based) has a CVE-2025-21185 Elevation of Privilege vulnerability (CVSS v3.1 base score 6.5; vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). Affects Edge components as described in the entry; impact is limited to confidentiality exposure (C:H) with no integrity or a...

6.5CVSS6.9AI score0.00803EPSS
SaveExploits0References1Affected Software1
Circl
Circl
added 2024/07/17 2:20 a.m.8 views

CVE-2024-21185

creationtimestamp| type| source ---|---|--- 2024-07-17 02:20:08+00:00| seen| https://t.me/cvedetector/1038...

4.9CVSS6.2AI score0.00863EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/07/17 12:0 a.m.25 views

Oracle MySQL Server 8.0.38, 8.4.1, 9.0.0 Security Update (cpujul2024) - Linux

Oracle MySQL Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.9CVSS4.6AI score0.00863EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2024/07/16 10:40 p.m.34 views

CVE-2024-21185

...

4.9CVSS7.2AI score0.00863EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2024/07/16 10:40 p.m.48 views

CVE-2024-21185

Removed by vendor...

4.9CVSS5.8AI score0.00863EPSS
SaveExploits0
Cvelist
Cvelist
added 2024/07/16 10:40 p.m.37 views

CVE-2024-21185

...

4.9CVSS0.00863EPSS
SaveExploits0References1
Circl
Circl
added 2023/06/28 10:13 p.m.7 views

CVE-2023-21185

creationtimestamp| type| source ---|---|--- 2023-06-28 22:13:12+00:00| seen| https://t.me/cibsecurity/65642...

7.8CVSS7.5AI score0.00088EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2023/06/28 6:15 p.m.5 views

CVE-2023-21185

In multiple functions of WifiNetworkFactory.java, there is a missing permission check. This could lead to local escalation of privilege from the guest user with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android I...

7.8CVSS6.1AI score0.00088EPSS
SaveExploits0References2
CVE
CVE
added 2023/06/28 12:0 a.m.80 views

CVE-2023-21185

CVE-2023-21185 affects Android 13 devices, where multiple functions in WifiNetworkFactory.java lack a required permission check. This creates a path for local privilege escalation from a guest user, with no additional execution privileges and no user interaction required to exploit. Public source...

7.8CVSS7.7AI score0.00088EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2022/05/20 10:51 p.m.30 views

CVE-2021-21185

Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome Extension...

4.3CVSS3.3AI score0.01311EPSS
SaveExploits1References2
OpenVAS
OpenVAS
added 2021/04/16 12:0 a.m.27 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0392-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS8AI score0.23847EPSS
SaveExploits32References4
OpenVAS
OpenVAS
added 2021/03/15 12:0 a.m.28 views

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Mar 2021)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

9.6CVSS8.3AI score0.23847EPSS
SaveExploits32References3
OSV
OSV
added 2021/03/09 6:15 p.m.9 views

CVE-2021-21185

Insufficient policy enforcement in extensions in Google Chrome prior to 89.0.4389.72 allowed an attacker who convinced a user to install a malicious extension to obtain sensitive information via a crafted Chrome Extension...

4.3CVSS7.9AI score
SaveExploits0References7
CVE
CVE
added 2021/03/09 5:46 p.m.220 views

CVE-2021-21185

CVE-2021-21185 affects the Chromium browser (Extensions component) with a policy enforcement issue that could allow a user-targeted attacker who lures a user into installing a malicious extension to exfiltrate sensitive information. The Debian advisories list this CVE among multiple Chromium fixe...

4.3CVSS4.9AI score0.01311EPSS
SaveExploits1References7Affected Software1
Microsoft CVE
Microsoft CVE
added 2021/03/04 8:4 p.m.26 views

Chromium CVE-2021-21185: Insufficient policy enforcement in extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6AI score0.01311EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/03/02 12:0 a.m.97 views

Google Chrome < 89.0.4389.72 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 89.0.4389.72. It is, therefore, affected by multiple vulnerabilities as referenced in the 202103stable-channel-update-for-desktop advisory. - Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a...

8.8CVSS7.8AI score0.23847EPSS
SaveExploits24References67
Rows per page
Query Builder