Google Chrome Memory Misreference Vulnerability (CNVD-2020-31530)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the voice recognizer in versions prior to Google Chrome 81.0.4044.113. A remote attacker can exploit the vulnerability to bypass sandbox protection with the help of specially crafted HTML pages...

Google Chrome Multifunction Box Policy Enforcement Deficiency Vulnerability

Google Chrome is a web browser from Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in omnibox in versions of Google Chrome prior to 81.0.4044.92. A remote attacker can exploit this vulnerability to bypass security restrictions with the help of specially...

Unspecified Vulnerability in Google Chrome (CNVD-2020-38213)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an unspecified vulnerability that stems from insufficient policy enforcement. The vulnerability can be exploited by an attacker to bypass security restrictions with the help of specially crafted HTML pages...

Google Chrome suffers from an unspecified vulnerability (CNVD-2020-38209)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an unspecified vulnerability that stems from insufficient policy enforcement. The vulnerability can be exploited by an attacker to bypass security restrictions with the help of specially crafted HTML pages...

The vulnerability of the Graphics Device Interface (GDI) component in Windows operating systems allows a hacker to gain full control over the system or execute arbitrary code.

The vulnerability of the Graphics Device Interface GDI component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain full control over the system or execute arbitrary code using a specially created documen...

The vulnerability of the Media Foundation component in Windows operating systems allows a hacker to gain access and modify data.

The vulnerability of the Media Foundation component in Windows operating systems is related to incorrect handling of objects in memory. Exploiting this vulnerability can allow an attacker to gain access to, modify, or delete data through a specially created document or a specially created web pag...

Google Chrome cross-origin data leakage vulnerability (CNVD-2020-10256)

Chrome is a web browsing tool developed by Google. A cross-origin data leakage vulnerability exists in Google Chrome versions prior to 80.0.3987.87. The vulnerability stems from insufficient policy enforcement in Blink in Chrome. An attacker can exploit the vulnerability to leak cross-origin data...

Google Chrome Integer Overflow Vulnerability (CNVD-2020-10249)

Chrome is a web browsing tool developed by Google. An integer overflow vulnerability exists in JavaScript in versions prior to Google Chrome 80.0.3987.87. An attacker can exploit this vulnerability to cause heap corruption via specially crafted HTML pages...

The vulnerability of the Windows GDI component in Windows operating systems allows attackers to disclose protected information.

The vulnerability of the Windows GDI component in Windows operating systems is related to deficiencies in security mechanisms. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially crafted web page or file...

Google Chrome JavaScript Buffer Overflow Vulnerability

Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A buffer overflow vulnerability exists in Google Chrome JavaScript. An attacker can exploit this vulnerability to cause heap corruption with the help of special...

Google Chrome JavaScript Component Buffer Overflow Vulnerability

Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A buffer overflow vulnerability exists in the Google Chrome JavaScript component. An attacker can exploit this vulnerability to execute arbitrary code inside a...

Google Chrome Type Obfuscation Vulnerability (CNVD-2019-46422)

Google Chrome is the United States Google Google company's a Web browser. JavaScript is one of the JavaScript code debugging components. A type confusion vulnerability exists in Google Chrome. An attacker can exploit this vulnerability to cause heap corruption with the help of specially crafted...

Google Chrome Input Validation Error Vulnerability (CNVD-2019-46759)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability. An attacker can exploit this vulnerability to spoof domain names with the help of specially crafted HTML pages...

Google Chrome Omnibox Content Spoofing Vulnerability

Chrome is a web browsing tool developed by Google. A security vulnerability exists in Google Chrome versions prior to 77.0.3865.75. The vulnerability stems from insufficient validation of untrustworthy input by the navigation in Chrome. A remote attacker can exploit the vulnerability to spoof the...

Google Chrome URL Spoofing Vulnerability (CNVD-2019-38248)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 78.0.3904.70, which stems from the program not properly handling user-submitted data. A remote attacker can exploit the vulnerability to spoof URLs with the help of...

The vulnerability of the DirectWrite programming interface in Windows operating systems allows attackers to gain unauthorized access to protected information.

The vulnerability of the DirectWrite programming interface in Windows operating systems is related to errors in object handling in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created document or visiting a...

PT-2019-3064 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge HTML-based affected versions not specified Description: A remote code execution issue exists in the way the Chakra scripting engine handles objects in memory. This could allow an attacker to execute arbitrary code in the contex...

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, related to errors in memory object handling, allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is related to errors in memory object handling. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted web page...

PT-2019-1813 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is caused by a buffer overflow in the Windows Graphics Device Interface GDI due to improper handling of objects in memory. This allows a remote attacker to execute arbitrary code ...

Google Chrome WebAudio Memory Misreference Vulnerability (CNVD-2019-03606)

Google Chrome is the United States Google Google company developed a Web browser. WebAudio is one of the audio player plug-ins. A memory misreference vulnerability exists in WebAudio in versions of Google Chrome prior to 69.0.3497.81. A remote attacker can exploit this vulnerability to execute...