CVE-2021-30550

Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-30550

Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-30550: Use After Free

Use after free in Accessibility in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

Arbtirary Code Execution

chromium is vulnerable to arbitrary code execution. A use after free security in the Accessibility component allows an attacker to execute arbitrary code on the host OS...

Cloud vs on premises: 3 reasons the Cloud is winning

Thanks to the vast rollout of COVID-19 vaccines to millions of people in the US and Europe, some of us are finally seeing some semblance of a return to normalcy. And organizations, who have experienced first-hand the struggle to stay afloat during months of struggle, are expecting to transition...

Chromium: CVE-2021-30550 Use after free in Accessibility

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in Accessibility in Google Chrome versions prior to 91.0.4472.101. No detailed vulnerability details are provided at this...

com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManager

The vulnerability of the com.newrelic.agent.deps.ch.qos.logback.core.db.DriverManagerConnectionSource component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability can allow an attacker to compromise th...

oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS Jackson-datab

The vulnerability of the oadd.org.apache.commons.dbcp.cpdsadapter.DriverAdapterCPDS component in the Jackson-databind library of the FasterXML project is related to the restoration of unreliable data in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...

Code injection

Files are accessible without restrictions from the /update/results page of redhat-certification 7 package, allowing an attacker to remove any file accessible by the apached user...

Microsoft Data Compromise Insights Extension

The vulnerability of the Microsoft Accessibility Insights browser extension is related to the lack of protection for service data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the device through a specially created web page...

PT-2021-4522

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 91.0.4472.101 Description The issue is related to a use after free in the Accessibility component of Google Chrome, which can be exploited by an attacker who convinces a user to install a malicious extension. Th...

Linux io_uring Data Compromise

The vulnerability of the asynchronous input/output interface iouring in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...

TeaBot Trojan Targets Banks via Hijacked Android Handsets

Researchers have discovered an Android trojan that can steal victims’ SMS messages and credentials and completely take over devices. The trojan, dubbed TeaBot, is aimed at committing fraud against at least 60 banks in Europe. Join Threatpost for “Fortifying Your Business Against Ransomware, DDoS ...

Patch Tuesday - May 2021

Here we are again with another installment of Patch Tuesday. When compared to the past few months this one feels a bit light both in severity and number of vulnerabilities addressed. Microsoft has only released patches for 55 CVEs this month, less than half of the usual volume, with only 4 of the...

CVE-2021-31936

Microsoft Accessibility Insights for Web Information Disclosure Vulnerability...

CVE-2021-31936

Microsoft Accessibility Insights for Web Information Disclosure Vulnerability...

CVE-2021-31936

Microsoft Accessibility Insights for Web Information Disclosure Vulnerability...

Information disclosure

Microsoft Accessibility Insights for Web Information Disclosure Vulnerability...

CVE-2021-31936

CVE-2021-31936 corresponds to a Microsoft vulnerability affecting Microsoft Accessibility Insights for Web. The connected PT-2021-3046 entry indicates a flaw related to insufficient protection of service data in the Microsoft Accessibility Insights for Web browser extension, which could allow a r...