CVE-2018-6059

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-11225. Reason: This candidate is a reservation duplicate of CVE-2017-11225. Notes: All CVE users should reference CVE-2017-11225 instead of this candidate. All references and descriptions in this candidate have been removed t...

CVE-2021-30629

Use after free in Permissions in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-30628

Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page...

CVE-2021-30625

Use after free in Selection API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who convinced the user the visit a malicious website to potentially exploit heap corruption via a crafted HTML page...

Denial Of Service

chromium-browser:bionic is vulnerable to denial of service. It allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

Denial Of Service (DoS)

chromium-browser:bionic is vulnerable denial of service. It allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Spoofable Contents

chromium-browser:bionic is spoofable . Inappropriate implementation allows a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

Denial Of Service (DoS)

chromium-browser:bionic is vulnerable to denial of service. It allowed an attacker who convinced a user to engage in a series of user gestures to potentially exploit heap corruption via a crafted HTML page...

MGASA-2021-0450 Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to 94.0.4606.61 version that fixes multiples security vulnerabilities. From 90.0.4430.72 released on April 14, 2021 to 94.0.4606.61 version, see upstream advisories...

CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In...

CVE-2021-30620

Chromium: CVE-2021-30620 Insufficient policy enforcement in Blink...

CVE-2021-30623

Chromium: CVE-2021-30623 Use after free in Bookmarks...

CVE-2021-30609

Chromium: CVE-2021-30609 Use after free in Sign-In...

Use After Free

chromium-browser has an use-after-free vulnerability. An attacker is able to exploit the vulnerability by installing a malicious extension to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-30585

Use after free in sensor handling in Google Chrome on Windows prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-30562

Use after free in WebSerial in Google Chrome prior to 91.0.4472.164 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CentOS 8 : thunderbird (CESA-2021:2883)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2021:2883 advisory. - Mozilla: IMAP server responses sent by a MITM prior to STARTTLS could be processed CVE-2021-29969 - Mozilla: Use-after-free in accessibility features...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

chromium-browser: Out of bounds write in ANGLE

Out of bounds write in ANGLE in Google Chrome prior to 91.0.4472.101 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

RHEL 8 : thunderbird (RHSA-2021:2914)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:2914 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 78.12.0. Security Fixes: Mozilla:...