The vulnerabilities of browsers Internet Explorer and Microsoft Edge allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of JScript 9, VBScript, and Chakra JavaScript in Internet Explorer and Microsoft Edge browsers is due to buffer overflow. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause a service failure memory corruption through a specially crafted web page...

The vulnerability of the Firefox browser, which allows a hacker to gain access to local files

The vulnerability of Firefox browsers is related to an improper limitation during the “drag-and-drop” operation for the file:URL object. Exploiting this vulnerability can allow a remote attacker to gain access to local files through a specially crafted website...

LocalTapiola: Blind Stored XSS Against Lahitapiola Employees - Session and Information leakage

Hi, I am pretty sure that I found a vulnerability similar to https://hackerone.com/reports/135154. An adversary can use the "Lähetä viesti"-functionality of the LähiTapiola Asiakassalkku to send a malicious file. When the customer service opens the file, an XSS will execute and will leak user IP...

Gratipay: Host Header poisoning on gratipay.com

There is a host header poisoning vulnerability on gratipay.com that allows an attacker to cause a 301 redirect and poison the browser DNS cache to cause all further requests to gratipay.com to be redirected to the attacker's site. PoC Request: GET https://gratipay.com/ HTTP/1.1 Host: heroku.com...

Fast Browser Vulnerability

KChrome, derived from Google's open source project Chromium and compatible with IE, is a browser with dual kernels of Webkit and IE. Thanks to the high performance of Webkit, you will be faster when browsing the web in normal times. A design vulnerability exists in Crypto Browser that allows...

The vulnerability of the Internet Explorer browser allows a malicious actor to execute arbitrary code with privileges of the current user.

The Internet Explorer browser contains a vulnerability related to errors that occur due to incorrect access to objects in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code with privileges of the current user...

The vulnerability of Google Chrome browser allows a remote attacker to execute arbitrary code.

The vulnerability of Google Chrome exists due to improper interaction between the IPC component, the Gamepad API, and Google V8. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of Google Chrome browser allows a malicious actor to compromise the accessibility of protected information.

The vulnerability exists in the module/webaudio/BiquadDSPKernel.cpp of the Web Audio API implementation in Blink for Google Chrome. It stems from improper handling of parallel streams when attempting to update the coefficients of the biquad filter. Exploiting this vulnerability allows malicious...

The vulnerability in the Firefox ESR software allows a malicious individual to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability in the browser engine of Mozilla Firefox ESR allows malicious actors operating remotely to cause service failures memory errors and unexpected application termination or execute arbitrary code...

The vulnerability of the Firefox browser, which allows a malicious attacker to execute arbitrary code or trigger a service denial.

The vulnerability of the asm.js component in the Firefox browser lies in its improper handling of safe exception handling during JIT-compilation and its access to dynamic memory. Exploiting this vulnerability allows a malicious actor to gain access to data in separate memory segments, and then...

The vulnerability of the Internet Explorer browser, which allows a malicious actor to execute arbitrary code

Internet Explorer browser contains a vulnerability related to array indexing, which arises due to insufficient validation of data entered by users when working with CSS objects. Exploiting this vulnerability allows malicious actors to execute arbitrary code through a specially created website...

The vulnerability of Google Chrome’s browser allows a malicious actor to circumvent access restrictions.

The Google Chrome browser contains a vulnerability related to improper handling of internationalization metadata. Exploiting this vulnerability allows malicious actors to bypass access restrictions by using “type mixing” and viewing property information. The vulnerability is associated with the...

The vulnerability of the Firefox browser allows a malicious actor to bypass the restrictions.

The Mozilla Firefox browser contains a vulnerability related to errors in the implementation of the WebGL.compressedTexImage2D and WebGL.compressedTexSubImage2D functions. Exploiting this vulnerability allows malicious actors to bypass domain restrictions and display content from another domain...

The vulnerability of the Firefox ESR browser, which allows a malicious individual to execute arbitrary code

The Mozilla Firefox ESR browser contains a vulnerability related to errors in the implementation of the Web IDL technology. Exploiting this vulnerability allows malicious actors operating remotely to execute arbitrary JavaScript code with Chrome privileges, by using a fragment of IDL to trigger a...

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of the Google Chrome browser extension subsystem is related to errors in the code. Exploiting this vulnerability could allow a malicious actor to bypass existing access restrictions policies...

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the ports/SkFontHostFreeType.cpp file of the Google Chrome browser’s Skia component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure or other adverse effects memory corruption...

CVE-2016-2815

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 47.0 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...

CVE-2016-1667

CVE-2016-1667 describes a cross-origin bypass in the DOM implementation of Blink/WebKit used by Google Chrome before 50.0.2661.102. The vulnerability stems from the TreeScope::adoptIfNeeded function in WebKit/Source/core/dom/TreeScope.cpp, which failed to prevent script execution during node adop...

Microsoft Internet Explorer Security Feature Bypass Vulnerability

Microsoft Internet Explorer IE is a Web browser developed by the American company Microsoft and is the default browser that comes with the Windows operating system. A security feature bypass vulnerability exists in the User Mode Code Integrity UMCI component of Device Guard in Microsof IE version...

CVE-2016-0192

Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Microsoft Browser Memory Corruption Vulnerability."...