1018 matches found
The vulnerability in the Google Chrome browser’s user interface allows a hacker to conceal the secure user interface.
The vulnerability of the user interface in full-screen mode of the Google Chrome browser is related to deficiencies in data storage. Exploiting this vulnerability allows a malicious actor to conceal the secure user interface using a specially crafted HTML page...
The vulnerability of Google Chrome’s WebGL component for the Mass OS operating system allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of Google Chrome’s WebGL component for macOS operating systems relates to the restoration of unreliable data in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through the...
The vulnerability of the Google Chrome browser arises from its inability to handle sequences of characters CRLF, which allows attackers to circumvent navigation restrictions.
The vulnerability of the Google Chrome browser exists due to the failure to address the issue of eliminating CRLF sequences. Exploiting this vulnerability allows a remote attacker to circumvent navigation restrictions by using a specially created HTML page...
The vulnerability of the Mojo messaging library in Google Chrome allows a hacker to elevate their privileges and escape from the isolated software environment.
The vulnerability of the Mojo messaging library in Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and escape from an isolated software environment using a specially created HTML page...
DEBIAN-CVE-2019-13676
Insufficient policy enforcement in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...
UBUNTU-CVE-2019-13678
Incorrect data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...
UBUNTU-CVE-2019-13667
Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
PT-2020-3630 · Roundcube +4 · Roundcube Webmail +4
Name of the Vulnerable Software and Affected Versions: Roundcube Webmail versions 1.2.10 and earlier, 1.3.x before 1.3.14, and 1.4.x before 1.4.7 Description: The issue allows for cross-site scripting XSS via a crafted HTML e-mail message. This can be demonstrated by a JavaScript payload in the...
chromium-browser: Google URI shown for certificate warning
Insufficient policy enforcement in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via a crafted HTML page...
chromium-browser: Use-after-free in IndexedDB
Use after free in IndexedDB in Google Chrome prior to 77.0.3865.120 allowed a remote attacker who had compromised the renderer process to execute arbitrary code via a crafted HTML page...
The vulnerability in the Google Chrome web browser, related to memory usage after deallocation, allows a malicious actor to execute arbitrary code in the context of the current user or to cause a denial-of-service attack.
The vulnerability in the Google Chrome web browser relates to the use of memory after deallocation. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in the context of the current user, or to cause a denial-of-service attack through a specially created HTML pag...
The vulnerability of the web server of the Cisco Integrated Management Controller, a software-based remote management system for servers, allows a perpetrator to trigger a service failure.
The vulnerability of the Cisco Integrated Management Controller, a software-based remote server management system, is related to improper checking of boundaries. Exploiting this vulnerability can allow an attacker to trigger a service failure through a specially created HTTP request...
CVE-2018-6148
Incorrect implementation in Content Security Policy in Google Chrome prior to 67.0.3396.79 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...
CVE-2018-6149
Type confusion in JavaScript in Google Chrome prior to 67.0.3396.87 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...
The vulnerability of Google Chrome’s browser, related to access control errors, allows a violator to circumvent existing CORS policy restrictions.
The vulnerability in Google Chrome relates to access control errors. Exploiting this vulnerability allows a remote attacker to bypass CORS policies for audio content by using a specially created HTML page...
The vulnerability of Blink’s rendering module in Google Chrome web browsers allows a hacker to trigger a service failure.
The vulnerability of Google Chrome’s Blink rendering module is related to errors in managing the lifecycle of objects, which can lead to damage to the heap. Exploiting this vulnerability allows a remote attacker to trigger a service failure through a specially created HTML page...
DEBIAN-CVE-2019-5759
Incorrect lifetime handling in HTML select elements in Google Chrome on Android and Mac prior to 72.0.3626.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...
The vulnerability of the Blink web browser component in Google Chrome allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the Blink web browser component of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created HTML...