Lucene search
+L

564 matches found

CNNVD
CNNVD
added 2021/01/20 12:00 a.m.13 views

Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A DevTools improperly implemented vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A remote attacker could potentially exploit this...

9.6CVSS7.3AI score0.23406EPSS
SaveExploits0References7
CNVD
CNVD
added 2021/01/20 12:00 a.m.22 views

Google Chrome DevTools Improperly Implemented Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A DevTools improperly implemented vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A remote attacker could potentially exploit this...

9.6CVSS6.3AI score0.23406EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/08 7:15 p.m.3 views

DEBIAN-CVE-2021-21111

Insufficient policy enforcement in WebUI in Google Chrome prior to 87.0.4280.141 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

9.6CVSS8.3AI score0.01065EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/08 7:15 p.m.21 views

CVE-2020-16027

Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user's disk via a crafted Chrome Extension...

6.5CVSS6.8AI score0.00931EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2021/01/07 12:00 a.m.12 views

Google Chrome 访问控制错误漏洞

Google Chrome is a web browser from Google, an American company. A policy enforcement deficiency vulnerability exists in the WebUI in versions prior to Google Chrome 87.0.4280.141. An attacker can exploit the vulnerability to perform sandbox escaping via a specially crafted Chrome extension...

9.6CVSS7.3AI score0.01065EPSS
SaveExploits0References10
Veracode
Veracode
added 2020/12/06 4:44 a.m.31 views

Insufficient Policy Enforcement

Google Chrome has insufficient policy enforcement. An attacker could access content on the local file system via a crafted Chrome Extension...

6.5CVSS3.6AI score0.00976EPSS
SaveExploits0References7Affected Software1
RedhatCVE
RedhatCVE
added 2020/11/18 6:39 p.m.32 views

CVE-2020-16027

Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user's disk via a crafted Chrome Extension...

6.5CVSS3.7AI score0.00931EPSS
SaveExploits0References4
Prion
Prion
added 2020/11/03 3:15 a.m.32 views

Code injection

Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension...

4.3CVSS6.5AI score0.01028EPSS
SaveExploits0References7Affected Software4
Debian CVE
Debian CVE
added 2020/11/03 2:21 a.m.30 views

CVE-2020-15973

Insufficient policy enforcement in extensions in Google Chrome prior to 86.0.4240.75 allowed an attacker who convinced a user to install a malicious extension to bypass same origin policy via a crafted Chrome Extension...

6.5CVSS7.4AI score0.01028EPSS
SaveExploits0
OSV
OSV
added 2020/09/21 8:15 p.m.4 views

DEBIAN-CVE-2020-6554

Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS8.8AI score0.00615EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/21 8:15 p.m.9 views

UBUNTU-CVE-2020-6554

Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS7.3AI score0.00615EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2020/09/21 8:15 p.m.26 views

CVE-2020-15966

Insufficient policy enforcement in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension...

4.3CVSS6.7AI score0.01331EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2020/09/21 8:15 p.m.30 views

CVE-2020-15961

Insufficient policy validation in extensions in Google Chrome prior to 85.0.4183.121 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

9.6CVSS7.2AI score0.01473EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2020/09/21 8:15 p.m.21 views

CVE-2020-6554

Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS7.2AI score0.00615EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
added 2020/08/26 2:15 p.m.8 views

chromium-browser: Use after free in extensions

Use after free in extensions in Google Chrome prior to 84.0.4147.125 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS7.4AI score0.00615EPSS
SaveExploits0References5
BDU FSTEC
BDU FSTEC
added 2020/08/06 12:00 a.m.11 views

The vulnerability of Google Chrome browser extensions, related to the use of memory areas after they are freed, allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome browser extensions is related to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially created extensio...

9.3CVSS7.3AI score0.01435EPSS
SaveExploits0References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/08/06 12:00 a.m.10 views

The vulnerability of Google Chrome browser developer tools allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome browser developers’ tools is related to the lack of standard permission mechanisms. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and also cause service interruptions through a specially created...

7.3CVSS7.5AI score0.01161EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2020/08/05 12:00 a.m.13 views

The vulnerability of Google Chrome browser extensions, related to the disclosure of information, allows attackers to gain access to confidential data.

The vulnerability of Google Chrome browser extensions is related to the disclosure of information. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created extension...

4.3CVSS6.6AI score0.01327EPSS
SaveExploits1References14Affected Software5
ATTACKERKB
ATTACKERKB
added 2020/07/22 5:15 p.m.5 views

CVE-2020-6509

Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

9.6CVSS8.1AI score0.00814EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2020/06/29 4:03 p.m.6 views

chromium-browser: Use after free in extensions

Use after free in extensions in Google Chrome prior to 83.0.4103.116 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

9.6CVSS7.3AI score0.00814EPSS
SaveExploits0References5
Rows per page
Query Builder