Security Vulnerabilities fixed in Firefox 90 — Mozilla

A malicious webpage could have triggered a use-after-free, memory corruption, and a potentially exploitable crash. This bug only affected Firefox when accessibility was enabled. If a user had granted a permission to a webpage and saved that grant, any webpage running on the same host - irrespecti...

Mozilla Firefox ESR < 78.12

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 78.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-29 advisory. - An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentiall...

Mozilla Thunderbird < 78.12

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 78.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-30 advisory. - An out of bounds write in ANGLE could have allowed an attacker to corrupt memory leading to a potentiall...

[ASA-202107-1] electron12: arbitrary code execution

Arch Linux Security Advisory ASA-202107-1 ========================================= Severity: High Date : 2021-07-01 CVE-ID : CVE-2021-30547 CVE-2021-30553 CVE-2021-30554 Package : electron12 Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-2112 Summary =====...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0938-1 Rating: important References: 1187141 1187481 Cross-References: CVE-2021-30544 CVE-2021-30545 CVE-2021-30546 CVE-2021-30547 CVE-2021-30548 CVE-2021-30549 CVE-2021-30550 CVE-2021-30551 CVE-2021-30552...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0881-1 Rating: important References: 1187141 Cross-References: CVE-2021-30544 CVE-2021-30545 CVE-2021-30546 CVE-2021-30547 CVE-2021-30548 CVE-2021-30549 CVE-2021-30550 CVE-2021-30551 CVE-2021-30552...

CVE-2021-30547

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

DEBIAN-CVE-2021-30547

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

UBUNTU-CVE-2021-30547

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

CVE-2021-30547

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

Design/Logic Flaw

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

CVE-2021-30547

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

CVE-2021-30547

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

CVE-2021-30547

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

CVE-2021-30547

CVE-2021-30547 : Out-of-bounds write in ANGLE affecting the Chromium/Chrome engine before 91.0.4472.101. A crafted HTML page could enable a remote attacker to cause memory access issues or a potentially exploitable crash. Mitigation: upgrade to Chrome/Chromium 91.0.4472.101 or newer (per multiple...

Arbtirary Code Execution

chromium is vulnerable to arbitrary code execution. An out-of-bounds write in Angle allows an attacker to execute arbtirary code on the host OS...

Chromium: CVE-2021-30547 Out of bounds write in ANGLE

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Google Chrome Out-of-Bounds Write Vulnerability (CNVD-2021-43406)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An out-of-bounds write vulnerability exists in ANGLE in versions prior to Google Chrome 91.0.4472.101. No detailed vulnerability details are provided at this time...

Google Chrome 缓冲区错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An out-of-bounds write vulnerability exists in ANGLE in versions prior to Google Chrome 91.0.4472.101. No detailed vulnerability details are provided at this time...

openSUSE Security Update : Chromium (openSUSE-2021-629)

This update for chromium fixes the following issues : - Chromium was updated to 90.0.4430.93 boo1184764,boo1185047,boo1185398 - CVE-2021-21227: Insufficient data validation in V8. - CVE-2021-21232: Use after free in Dev Tools. - CVE-2021-21233: Heap buffer overflow in ANGLE. - CVE-2021-21228:...