UBUNTU-CVE-2021-21115

User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

Design/Logic Flaw

Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21115

CVE-2021-21115 : In Google Chrome before 87.0.4280.141, a use-after-free in the Safe Browsing component could allow a renderer-compromised remote attacker to escape the sandbox via a crafted HTML page. This is confirmed in connected advisories (e.g., Arch Linux ASA-202101-6) referencing Chromium ...

CVE-2021-21115

User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21115

User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21110

CVE-2021-21110 concerns Chromium/Chrome: a use-after-free in the safe browsing component of the Chromium browser before version 87.0.4280.141 could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Connected advisories consistently tie this CVE to Chromium u...

CVE-2021-21110

Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21110

Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21115: Use After Free

User after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

CVE-2021-21110: Use After Free

Use after free in safe browsing in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in "Safe Browsing" in Google Chrome versions prior to 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

Google Chrome memory misreference vulnerability (CNVD-2021-04417)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in "Safe Browsing" in Google Chrome versions prior to 87.0.4280.141. A remote attacker can exploit the vulnerability to perform sandbox escaping via specially crafted HTML pages...

Making browsing safe from phishing

Privacy, Security Making browsing safe from phishing Share January 7th, 2021 Mallory tries to create a phishing site to lure Alice into revealing her secrets. TL;DR: skip to the conclusions to see what Alice learned. The Privacy Problem In the previous episode, Mallory was thinking about...

CVE-2020-29623

"Clear History and Website Data" did not clear the history. The issue was addressed with improved data deletion. This issue is fixed in macOS Big Sur 11.1, Security Update 2020-001 Catalina, Security Update 2020-007 Mojave, iOS 14.3 and iPadOS 14.3, tvOS 14.3. A user may be unable to fully delete...

CVE-2019-12768

An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02J65H Hot Fix. Attackers can bypass authentication via forceful browsing...

CVE-2019-12768

An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02J65H Hot Fix. Attackers can bypass authentication via forceful browsing...

Authentication flaw

An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02J65H Hot Fix. Attackers can bypass authentication via forceful browsing...

CVE-2019-12768

The CVE-2019-12768 issue affects D-Link DAP-1650 devices prior to 1.04B02_J65H Hot Fix, where an authentication bypass is achievable through forceful browsing. The vulnerability targets the device’s authentication mechanism, enabling unauthorized access without user interaction. A patched version...

CVE-2019-12768: Direct Request

An issue was discovered on D-Link DAP-1650 devices through v1.03b07 before 1.04B02J65H Hot Fix. Attackers can bypass authentication via forceful browsing...

Brave Software: Phishing/Malware site blocking on Brave iOS can be bypassed with trailing dot in hostname

A vulnerability was discovered in Brave iOS nightly build that allowed bypassing of the phishing/malware site blocking feature by adding a trailing dot in the hostname. This allowed users to access prohibited sites without being blocked by Brave Shield protection...