Lucene search
+L

2769 matches found

CNVD
CNVD
added 2021/01/20 12:0 a.m.23 views

Google Chrome Performance API Improperly Implemented Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A Performance API improperly implemented vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. An attacker can exploit the vulnerability to leak...

6.5CVSS5.8AI score0.19228EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/08 7:15 p.m.1 views

DEBIAN-CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6AI score0.0255EPSS
SaveExploits1References1
OSV
OSV
added 2021/01/08 7:15 p.m.7 views

CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS5AI score
SaveExploits0References2
CVE
CVE
added 2021/01/08 5:48 p.m.1351 views

CVE-2020-16012

CVE-2020-16012 is a timing side-channel vulnerability involving cross-origin data leakage via drawImage in graphics code. Connected advisories confirm multiple Mozilla products are affected (notably Firefox/Thunderbird) and that the issue arises from variable-time processing of cross-origin image...

4.3CVSS5.5AI score0.0255EPSS
SaveExploits1References2Affected Software2
Cvelist
Cvelist
added 2021/01/08 5:48 p.m.21 views

CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

5.6AI score0.0255EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2021/01/08 5:48 p.m.31 views

CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS5.9AI score0.0255EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2021/01/08 5:48 p.m.40 views

CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.9AI score0.0255EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2021/01/01 12:0 a.m.10 views

PT-2024-10821 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 85.0.4183.83 Description: The issue is related to insufficient policy enforcement in Navigation, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could potentially affect a...

9.6CVSS6.6AI score0.99595EPSS
SaveExploits52References342
Veracode
Veracode
added 2020/12/21 7:58 p.m.21 views

Information Disclosure

chromium is vulnerable to information disclosure. Inappropriate implementation in Content Security Policy allows a remote attacker to leak cross-origin data via a malicious HTML page...

6.5CVSS2.3AI score0.01523EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
added 2020/12/21 7:57 p.m.20 views

Information Disclosure

chromium is vulnerable to information disclosure. Insufficient policy enforcement in autofill allows a remote attacker to leak cross-origin data via a malicious HTML page...

6.5CVSS3.2AI score0.01646EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
added 2020/12/21 7:52 p.m.21 views

Information Leak

chromium, sid is vulnerable to information leak in content security policy in Google Chrome. It allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS2.2AI score0.01685EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
added 2020/12/21 7:52 p.m.32 views

Information Disclosure

chromium is vulnerable to information disclosure. The vulnerability exists through policy bypass in CORS that allows a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS3.9AI score0.04765EPSS
SaveExploits1References13Affected Software1
Veracode
Veracode
added 2020/12/21 7:50 p.m.28 views

Information Disclosure

chromium is vulnerable to information disclosure. Inappropriate implementation in WebView allows a remote attacker to leak cross-origin data via a malicious HTML page...

6.5CVSS2.4AI score0.01015EPSS
SaveExploits0References6Affected Software1
Veracode
Veracode
added 2020/12/06 3:5 a.m.19 views

Information Disclosure

Google Chrome is vulnerable to information disclosure. An attacker is able to leak cross-origin data via a crafted HTML page...

6.5CVSS1.1AI score0.01632EPSS
SaveExploits0References9Affected Software1
RedHat Linux
RedHat Linux
added 2020/12/01 3:26 p.m.7 views

Mozilla: Variable time processing of cross-origin images during drawImage calls

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS7.4AI score0.0255EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/11/30 7:50 p.m.6 views

Mozilla: Variable time processing of cross-origin images during drawImage calls

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS7.4AI score0.0255EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2020/11/30 8:37 a.m.6 views

Mozilla: Variable time processing of cross-origin images during drawImage calls

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS7.4AI score0.0255EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2020/11/17 12:0 a.m.26 views

CVE-2020-16012

Side-channel information leakage in graphics in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS6.8AI score0.0255EPSS
SaveExploits1References6
NVD
NVD
added 2020/09/21 8:15 p.m.10 views

CVE-2020-6560

Insufficient policy enforcement in autofill in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS0.01646EPSS
SaveExploits0References7
OSV
OSV
added 2020/09/21 8:15 p.m.6 views

CVE-2020-6561

Inappropriate implementation in Content Security Policy in Google Chrome prior to 85.0.4183.83 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS8.1AI score
SaveExploits0References8
Rows per page
Query Builder