Lucene search
+L

2478 matches found

CNVD
CNVD
added 2023/08/17 12:0 a.m.45 views

Google Chrome Input Validation Error Vulnerability (CNVD-2023-64445)

Google Chrome is a web browser from Google, an American company. An input validation error vulnerability exists in versions of Google Chrome prior to 106.0.5249.62, which stems from insufficient DevTools data validation. A remote attacker can exploit this vulnerability by sending a malicious HTTP...

6.5CVSS7.5AI score0.00607EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/08/17 12:0 a.m.36 views

Google Chrome Resource Management Error Vulnerability (CNVD-2023-64446)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability previously existed in Google Chrome version 91.0.4472.77, which stemmed from the existence of DevTools free after use. An attacker could exploit the vulnerability to cause the browser to cra...

8.8CVSS6.5AI score0.00536EPSS
SaveExploits1References1
CNVD
CNVD
added 2023/08/12 12:0 a.m.85 views

Google Chrome Security Bypass Vulnerability (CNVD-2023-63444)

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome versions prior to 108.0.5359.71 due to an improper implementation in DevTools. An attacker can use this vulnerability to bypass file access restrictions to install malicious...

6.5CVSS6.5AI score0.00334EPSS
SaveExploits1References1
Veracode
Veracode
added 2023/08/07 1:41 a.m.23 views

Improper Input Validation

chromium is vulnerable to Improper Input Validation. Insufficient data validation in DevTools allow a remote attacker to bypass navigation restrictions via a crafted HTML page...

6.5CVSS6.6AI score0.00372EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2023/08/07 12:36 a.m.23 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the DevTools in the library, which allows an attacker to cause heap corruption via a maliciously crafted HTML page through the renderer process...

8.8CVSS6.9AI score0.15428EPSS
SaveExploits0References8Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/08/07 12:0 a.m.10 views

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to circumvent existing navigation restrictions.

The vulnerability of the DevTools set of tools for web development in Google Chrome is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to circumvent existing navigation restrictions remotely...

7.8CVSS6.5AI score0.00372EPSS
SaveExploits1References4Affected Software2
Veracode
Veracode
added 2023/08/06 11:23 p.m.25 views

Access Restriction Bypass

chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to insufficient data validation in DevTools in Google Chrome which allows a remote attacker to bypass content security policy via a crafted HTML page...

6.5CVSS6.3AI score0.00607EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2023/08/06 9:58 p.m.20 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the DevTools in the library, which allows an attacker to convince user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension...

8.8CVSS7.6AI score0.00536EPSS
SaveExploits1References4Affected Software1
NVD
NVD
added 2023/08/04 8:15 p.m.42 views

CVE-2022-4955

Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.9AI score0.00334EPSS
SaveExploits1References2
OSV
OSV
added 2023/08/04 8:15 p.m.25 views

CVE-2022-4955

Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.3AI score
SaveExploits0References2
OSV
OSV
added 2023/08/04 8:15 p.m.2 views

DEBIAN-CVE-2022-4955

Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.3AI score0.00334EPSS
SaveExploits1References1
Prion
Prion
added 2023/08/04 8:15 p.m.30 views

Design/Logic Flaw

Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS6AI score0.00334EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2023/08/04 7:13 p.m.47 views

CVE-2022-4955

Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS5.8AI score0.00334EPSS
SaveExploits1
Cvelist
Cvelist
added 2023/08/04 7:13 p.m.33 views

CVE-2022-4955

Inappropriate implementation in DevTools in Google Chrome prior to 108.0.5359.71 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. Chromium security severity: Medium...

6.9AI score0.00334EPSS
SaveExploits1References2
CVE
CVE
added 2023/08/04 7:13 p.m.114 views

CVE-2022-4955

CVE-2022-4955 concerns Google Chrome before 108.0.5359.71, where an improper DevTools implementation could allow a user who installs a crafted extension via a malicious HTML page to bypass file access restrictions. The vulnerability stems from DevTools behavior and enables an attacker to exploit ...

6.5CVSS6.1AI score0.00334EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/08/04 12:0 a.m.6 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A security bypass vulnerability exists in Google Chrome versions prior to 108.0.5359.71 due to an improper implementation in DevTools. An attacker can use this vulnerability to bypass file access restrictions to install malicious...

6.5CVSS6.5AI score0.00334EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2023/08/03 12:0 a.m.17 views

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the DevTools set of tools for web development in Google Chrome relates to the use of memory after it is released. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.00536EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/07/29 12:15 a.m.27 views

CVE-2023-2314

Insufficient data validation in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

6.5CVSS5.2AI score
SaveExploits0References4
OSV
OSV
added 2023/07/29 12:15 a.m.8 views

DEBIAN-CVE-2023-2314

Insufficient data validation in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

6.5CVSS6.3AI score0.00372EPSS
SaveExploits1References1
NVD
NVD
added 2023/07/29 12:15 a.m.20 views

CVE-2023-2314

Insufficient data validation in DevTools in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Low...

6.5CVSS6.2AI score0.00372EPSS
SaveExploits1References4
Rows per page
Query Builder