Lucene search
+L

1630 matches found

CNVD
CNVD
added 2021/03/03 12:0 a.m.8 views

Google Chrome autofill information disclosure vulnerability

Google Chrome is a web browser from Google, an American company. An information disclosure vulnerability exists in Google Chrome autofill. A remote attacker can exploit this vulnerability to obtain sensitive information...

6.5CVSS5.7AI score0.01603EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/03/03 12:0 a.m.7 views

Google Chrome 授权问题漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Autofill. An attacker can exploit this vulnerability to bypass security restrictions...

6.5CVSS8.4AI score0.17289EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2021/03/03 12:0 a.m.10 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. An information disclosure vulnerability exists in Google Chrome autofill. A remote attacker can exploit this vulnerability to obtain sensitive information...

6.5CVSS8.4AI score0.01603EPSS
SaveExploits0References11
CNVD
CNVD
added 2021/03/03 12:0 a.m.23 views

Google Chrome Autofill Security Bypass Vulnerability

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome Autofill. An attacker can exploit this vulnerability to bypass security restrictions...

6.5CVSS6.2AI score0.17289EPSS
SaveExploits1References1
Kaspersky
Kaspersky
added 2021/03/02 12:0 a.m.478 views

KLA12106 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A heap buff...

8.8CVSS9.3AI score0.23847EPSS
SaveExploits25References4
OPENSUSE Linux
OPENSUSE Linux
added 2021/01/11 12:0 a.m.34 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0048-1 Rating: important References: 1180645 Cross-References: CVE-2020-15995 CVE-2020-16043 CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112...

9.6CVSS7.5AI score0.03095EPSS
SaveExploits0References1
OPENSUSE Linux
OPENSUSE Linux
added 2021/01/10 12:0 a.m.47 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:0041-1 Rating: important References: 1180645 Cross-References: CVE-2020-15995 CVE-2020-16043 CVE-2021-21106 CVE-2021-21107 CVE-2021-21108 CVE-2021-21109 CVE-2021-21110 CVE-2021-21111 CVE-2021-21112...

9.6CVSS7.5AI score0.03095EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/08 7:15 p.m.2 views

DEBIAN-CVE-2021-21106

Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS8.4AI score0.02239EPSS
SaveExploits0References1
Prion
Prion
added 2021/01/08 7:15 p.m.18 views

Double free

Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.3CVSS9.2AI score0.02239EPSS
SaveExploits0References6Affected Software3
OSV
OSV
added 2021/01/08 7:15 p.m.7 views

UBUNTU-CVE-2021-21106

Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS7.3AI score0.02239EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2021/01/08 5:56 p.m.28 views

CVE-2021-21106

Use after free in autofill in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6AI score0.02239EPSS
SaveExploits0References6
CVE
CVE
added 2021/01/08 5:56 p.m.196 views

CVE-2021-21106

The CVE-2021-21106 issue affects Chromium-based browsers (e.g., Google Chrome up to 87.0.4280.141 and related Chromium builds) and is caused by a use-after-free in the autofill component. This vulnerability could allow a remote attacker who has compromised the renderer process to escape the sandb...

9.6CVSS9.2AI score0.02239EPSS
SaveExploits0References6Affected Software1
CNNVD
CNNVD
added 2021/01/07 12:0 a.m.10 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome prior to version 87.0.4280.141 in "Autofill". A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

9.6CVSS7.3AI score0.02239EPSS
SaveExploits0References10
CNVD
CNVD
added 2021/01/07 12:0 a.m.8 views

Google Chrome memory misreference vulnerability (CNVD-2021-04421)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome prior to version 87.0.4280.141 in "Autofill". A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

9.6CVSS9AI score0.02239EPSS
SaveExploits0References1
Veracode
Veracode
added 2020/12/21 8:39 p.m.22 views

Sandbox Escape

chromium, sid is vulnerable to sandbox escape. It is due to a use after free in autofill in Google Chrome which allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

8.8CVSS2.4AI score0.01384EPSS
SaveExploits0References11Affected Software1
Veracode
Veracode
added 2020/12/21 7:57 p.m.20 views

Information Disclosure

chromium is vulnerable to information disclosure. Insufficient policy enforcement in autofill allows a remote attacker to leak cross-origin data via a malicious HTML page...

6.5CVSS3.2AI score0.01646EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
added 2020/12/21 7:50 p.m.20 views

Information Disclosure

chromium is vulnerable to information disclosure. Side-channel information leakage in autofill allows a remote attacker to obtain confidential information from process memory via a malicious HTML page...

6.5CVSS2.1AI score0.01703EPSS
SaveExploits0References13Affected Software1
CNVD
CNVD
added 2020/12/15 12:0 a.m.24 views

Unspecified Vulnerability in Mozilla FireFox (CNVD-2021-00393)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 83, which stems from the fact that a cross-domain iframe containing a login form may have been recognized and populated by the login...

6.1CVSS8.7AI score0.0069EPSS
SaveExploits0References1
OSV
OSV
added 2020/12/09 1:15 a.m.5 views

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS6.9AI score0.0069EPSS
SaveExploits0References2
NVD
NVD
added 2020/12/09 1:15 a.m.20 views

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

6.1CVSS5.6AI score0.0069EPSS
SaveExploits0References2
Rows per page
Query Builder