Chromium: CVE-2021-30538 Insufficient policy enforcement in content security policy

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-30532 Insufficient policy enforcement in Content Security Policy

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-30531 Insufficient policy enforcement in Content Security Policy

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Chromium: CVE-2021-30539 Insufficient policy enforcement in content security policy

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Google Chrome Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-41136)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A permission-permit and access-control issue vulnerability exists in versions prior to Google Chrome 91.0.4472.77, which can be exploited by remote attackers to...

Google Chrome Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-41129)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A permission-permit and access-control issue vulnerability exists in versions prior to Google Chrome 91.0.4472.77, which can be exploited by an attacker to bypass...

Google Chrome Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-41130)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A permission-permit and access-control issue vulnerability exists in versions prior to Google Chrome 91.0.4472.77, which can be exploited by an attacker to bypass...

Google Chrome权限许可和访问控制问题漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A permission-permit and access-control issue vulnerability exists in versions prior to Google Chrome 91.0.4472.77, which can be exploited by an attacker to bypass...

Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A permission-permit and access-control issue vulnerability exists in versions prior to Google Chrome 91.0.4472.77, which can be exploited by remote attackers to...

PT-2021-18772 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 91.0.4472.77 Description: Insufficient policy enforcement in content security policy allowed a remote attacker to bypass content security policy via a crafted HTML page. The issue has a security severity of...

Google Chrome权限许可和访问控制问题漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A permission-permit and access-control issue vulnerability exists in versions prior to Google Chrome 91.0.4472.77, which can be exploited by an attacker to bypass...

Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A permission-permit and access-control issue vulnerability exists in versions prior to Google Chrome 91.0.4472.77, which can be exploited by remote attackers to...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 91 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 91.0.4472.77 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

PT-2021-7876 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 91.0.4472.77 Description: The issue exists due to insufficient input validation in the Blink rendering engine of Google Chrome, allowing a remote attacker to bypass existing security restrictions. This can be...

UBUNTU-CVE-2021-29625

Adminer is open-source database management software. A cross-site scripting vulnerability in Adminer versions 4.6.1 to 4.8.0 affects users of MySQL, MariaDB, PgSQL and SQLite. XSS is in most cases prevented by strict CSP in all modern browsers. The only exception is when Adminer is using a pdo...

SOURCEFORGE Adminer 跨站脚本漏洞

SOURCEFORGE Adminer is an application from the American SOURCEFORGE community. Provides database management in a single PHP file. A security vulnerability exists in Adminer versions 4.6.1 through 4.8.0, which stems from Adminer's use of the pdo extension to communicate with the database, and...

Ubuntu 20.04 LTS : Thunderbird vulnerabilities (USN-4936-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4936-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attack...

Content-Security Policy (CSP) Bypas

firefox is vulnerable to content-security policy bypass. Documents formed using data: URLs in an OBJECT element failed to inherit the CSP of the creating context. This allows the execution of scripts that should have been blocked...

Scientific Linux Security Update : firefox on SL7.x i686/x86_64 (2021:0656)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0656-1 advisory. - Mozilla: Content Security Policy violation report could have contained the destination of a redirect CVE-2021-23968, CVE-2021-23969 - Mozilla:...

Scientific Linux Security Update : thunderbird on SL7.x x86_64 (2021:0661)

The remote Scientific Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the SLSA-2021:0661-1 advisory. - Mozilla: Content Security Policy violation report could have contained the destination of a redirect CVE-2021-23968, CVE-2021-23969 - Mozilla:...