199 matches found
CVE-2023-5475
Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted Chrome Extension. Chromium security severity: Medium...
CVE-2023-5475
Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted Chrome Extension. Chromium security severity: Medium...
SUSE CVE-2020-16043
Insufficient data validation in networking in Google Chrome prior to 87.0.4280.141 allowed a remote attacker to bypass discretionary access control via malicious network traffic...
SUSE CVE-2022-23132
During Zabbix installation from RPM, DACOVERRIDE SELinux capability is in use to access PID files in /var/run/zabbix folder. In this case, Zabbix Proxy or Server processes can bypass file read, write and execute permissions check on the file system level...
CVE-2022-2164
Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML page...
CVE-2022-2164
Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML page...
CVE-2022-2164
Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML page...
The vulnerability of the Windows Event Tracing service, related to the discretionary list of access control (DACL) in the Windows operating system, allows a perpetrator to trigger a service failure.
The vulnerability of the Windows Event Tracing service related to the discretionary access control list DACL of the Windows operating system involves an uncontrolled consumption of resources. Exploiting this vulnerability could allow a perpetrator to cause a service failure...
CVE-2022-21839
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...
CVE-2022-21839
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...
CVE-2022-21839
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...
Denial of service
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability...
CVE-2022-21839 Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability
...
Windows Event Tracing Discretionary Access Control List Denial of Service Vulnerability
...
CVE-2021-26333
An information disclosure vulnerability exists in AMD Platform Security Processor PSP chipset driver. The discretionary access control list DACL may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages...
CVE-2021-26333
An information disclosure vulnerability exists in AMD Platform Security Processor PSP chipset driver. The discretionary access control list DACL may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages...
CVE-2021-26333 AMD Chipset Driver Information Disclosure Vulnerability
An information disclosure vulnerability exists in AMD Platform Security Processor PSP chipset driver. The discretionary access control list DACL may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages...
CVE-2021-26333 AMD Chipset Driver Information Disclosure Vulnerability
An information disclosure vulnerability exists in AMD Platform Security Processor PSP chipset driver. The discretionary access control list DACL may allow low privileged users to open a handle and send requests to the driver resulting in a potential data leak from uninitialized physical pages...
Authorization Bypass
chromium is vulnerable to authorization bypass. Insufficient data validation in networking allows a remote attacker to bypass discretionary access control via malicious network traffic...
DEBIAN-CVE-2020-16020
Inappropriate implementation in cryptohome in Google Chrome on ChromeOS prior to 87.0.4280.66 allowed a remote attacker who had compromised the browser process to bypass discretionary access control via a malicious file...