2102 matches found
PT-2023-2932
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 113.0.5672.126 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in the Autofill UI of Google Chrome and Microsoft Edge browsers. This vulnerabilit...
The vulnerability of the Autofill function in browsers such as Google Chrome and Microsoft Edge allows attackers to carry out spear-phishing attacks.
The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created HTML page...
CVE-2023-20976
In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...
CVE-2023-20976
In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...
Google Pixel 输入验证错误漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from incorrect input validation that could mislead users into selecting default autofill apps...
PT-2023-17764 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation in the getConfirmationMessage function of DefaultAutofillPicker.java. This could potentially mislead the user into selecting a default autofill...
MGASA-2023-0099 Updated epiphany packages fix security vulnerability
In Epiphany aka GNOME Web through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts. CVE-2023-26081...
Updated epiphany packages fix security vulnerability
In Epiphany aka GNOME Web through 43.0, untrusted web content can trick users into exfiltrating passwords, because autofill occurs in sandboxed contexts. CVE-2023-26081...
Information Disclosure
Google Chrome is vulnerable to Information Disclosure. The vulnerability exists due to the insufficient policy enforcement in Autofill, which allows an attacker to leak cross-origin data via a crafted HTML page...
OESA-2023-1175 epiphany security update
Epiphany is the web browser for the GNOME desktop. Its goal is to be simple and easy to use. Epiphany ties together many GNOME components in order to let you focus on the Web content, instead of the browser application. Security Fixes: In Epiphany aka GNOME Web through 43.0, untrusted web content...
The vulnerability of Google Chrome’s Autofill function for Android allows a hacker to gain unauthorized access to protected information.
The vulnerability of Google Chrome’s Autofill function for Android is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through a specially created HTML page...
openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0068-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0068-1 advisory. - Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a...
Chromium: CVE-2023-1223 Insufficient policy enforcement in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Chromium: CVE-2023-1231 Inappropriate implementation in Autofill
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
KLA48544 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, gain privileges, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Policy enforcement...
Google Chrome Autofill component code issue vulnerability
Google Chrome is a web browser from Google, Inc. A code issue vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a weak policy enforcement issue in the Autofill component. A remote attacker could exploit the vulnerability to disclose cross-domain data via...
SUSE CVE-2023-1223
Insufficient policy enforcement in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...
SUSE CVE-2023-1231
Inappropriate implementation in Autofill in Google Chrome on Android prior to 111.0.5563.64 allowed a remote attacker to potentially spoof the contents of the omnibox via a crafted HTML page. Chromium security severity: Medium...
CVE-2023-27974
Bitwarden through 2023.2.1 offers password auto-fill when the second-level domain matches, e.g., a password stored for an example.com hosting provider when customer-website.example.com is visited. NOTE: the vendor's position is that "Auto-fill on page load" is not enabled by default...
Google Chrome Security Updates (stable-channel-update-for-desktop-2023-03) - Linux
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...