Use After Free

Chrome is vulnerable to use after free. The vulnerability exists due to the lack of sanitization of the Safe browsing component...

Update now! Chrome patches critical RCE vulnerability in Safe Browsing

Google has issued an update for the Chrome browser which includes 26 security fixes. What stands out is that one of these fixes is rated as "critical". The critical vulnerability is a use after free bug in the Safe Browsing feature. The Stable channel has been updated to 97.0.4692.99 for Windows,...

Pervasive Apple Safari Bug Exposes Web-Browsing Data, Google IDs

A security vulnerability in Apple’s browsers for macOS, iOS and iPadOS can lead to information disclosure, researchers have warned. Apple has just marked the issue as “resolved,” but it will take some time for the fixes to roll out, they said, so users should implement mitigations. According to...

Chromium: CVE-2022-0289 Use after free in Safe browsing

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

A Bug in iOS 15 Is Leaking User Browsing Activity in Real Time

Apple has known about the vulnerability, which also affects iPadOS 15 and Safari 15, since late November...

KLA12429 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Service Worker API can be exploited to cause denial of servic...

Stable Channel Update for Desktop

The Stable channel has been updated to 97.0.4692.99 for Windows, Mac and Linux which will roll out over the coming days/weeks. Extended stable channel has also been updated to 96.0.4664.110 for Windows and Mac which will roll out over the coming days/weeks A full list of changes in this build is...

Bug in Safari browser leaks personal identifiers and browsing activity

By Deeba Ahmed The bug affects the Safari 15 browser for Mac and all versions of Safari on iOS 15 and… This is a post from HackRead.com Read the original post: Bug in Safari browser leaks personal identifiers and browsing activity...

CVE-2019-11723

A vulnerability exists during the installation of add-ons where the initial fetch ignored the origin attributes of the browsing context. This could leak cookies in private browsing mode or across different "containers" for people who use the Firefox Multi-Account Containers Web Extension. This...

Information Disclosure

webkit2gtk:edge is vulnerable to information disclosure. The issue was resolved with additional restrictions on CSS compositing.Visiting a maliciously crafted website may reveal a user's browsing history...

CVE-2021-30884

A flaw was found in the way WebKitGTK performed CSS compositing. A malicious web site could possibly use this flaw to reveal user's browsing history...

CVE-2021-44315

CVE-2021-44315 affects Bus Pass Management System v1.0. The vulnerability is a misconfiguration where Directory Listing/Browsing is enabled on the web server, allowing an attacker to view sensitive files containing user or server information. Impact is information disclosure (partial confidential...

CVE-2021-20865

Advanced Custom Fields versions prior to 5.11 and Advanced Custom Fields Pro versions prior to 5.11 contain a missing authorization vulnerability in browsing database which may allow a user to browse unauthorized data via unspecified vectors...

Delicious Brains Advanced Custom Fields Access Control Error Vulnerability

Delicious Brains Advanced Custom Fields is an advanced custom fields plug-in from Delicious Brains Canada.An access control error vulnerability exists in Delicious Brains Advanced Custom Fields, which stems from a lack of authorization associated with database browsing The vulnerability stems fro...

Delicious Brains Advanced Custom Fields 安全漏洞

Delicious Brains Advanced Custom Fields is an advanced custom fields plug-in from Delicious Brains Canada.An access control error vulnerability exists in Delicious Brains Advanced Custom Fields, which stems from a lack of authorization associated with database browsing The vulnerability stems fro...

JVN#09136401: Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields"

WordPress Plugin "Advanced Custom Fields" provided by Delicious Brains contains multiple missing authorization vulnerabilities listed below. Missing authorization related to database browsing CWE-862 - CVE-2021-20865 Version| Vector| Score ---|---|--- CVSS v3|...

[SECURITY] Fedora 33 Update: vinagre-3.22.0-21.fc33

Vinagre is a VNC client for the GNOME desktop. With Vinagre you can have several connections open simultaneously, bookmark your servers thanks to the Favorites support, store the passwords in the GNOME keyring, and browse the network to look for VNC servers. Apart from the VNC protocol, vinagre...

[SECURITY] Fedora 34 Update: vinagre-3.22.0-23.fc34

Vinagre is a VNC client for the GNOME desktop. With Vinagre you can have several connections open simultaneously, bookmark your servers thanks to the Favorites support, store the passwords in the GNOME keyring, and browse the network to look for VNC servers. Apart from the VNC protocol, vinagre...

Google Chrome heap buffer overflow vulnerability (CNVD-2022-12741)

Chrome is a simple and efficiently designed web browsing tool developed by Google. A heap buffer overflow vulnerability exists in fingerprinting in versions of Google Chrome prior to 96.0.4664.45. An attacker can exploit this vulnerability to corrupt the WebUI renderer process to perform a sandbo...

USN-5146-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, or execute arbitrary code...