Lucene search
+L

1700 matches found

CNNVD
CNNVD
added 2021/06/24 12:00 a.m.14 views

Microsoft Edge 安全特征问题特征问题漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge Chromium-based is vulnerable to a security signature issue. No information about this vulnerability is available at this time, so stay tuned to CNNVD or the vendor announcement...

6.1CVSS6.5AI score0.02205EPSS
SaveExploits0References5
ThreatPost
ThreatPost
added 2021/06/10 8:07 p.m.576 views

Chrome Browser Bug Under Active Attack

Google is warning that a bug in its Chrome web browser is actively under attack, and it is urging users to upgrade to the latest 91.0.4472.101 version to mitigate the issue. In all, Google rolled out fixes for 14 bugs impacting its Windows, Mac and Linux browsers as part of its June update to the...

9.3CVSS8.8AI score0.70445EPSS
SaveExploits5References9
CNNVD
CNNVD
added 2021/05/27 12:00 a.m.8 views

Microsoft Edge 安全特征问题漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge suffers from a security signature issue vulnerability that allows remote attackers to trick victims into visiting specially designed websites to obtain sensitive information or...

8.8CVSS7.9AI score0.01307EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2021/05/27 12:00 a.m.9 views

Microsoft Edge 安全特征问题漏洞

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge suffers from a security signature issue vulnerability that allows remote attackers to bypass current security restrictions and trick victims into visiting specially designed...

8.2CVSS7.8AI score0.0085EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/05/27 12:00 a.m.8 views

PT-2021-7046 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: The issue is related to errors in security settings, allowing a remote attacker to potentially elevate their privileges. Recommendations: At the moment, there is no information about...

8.2CVSS7.9AI score0.0085EPSS
SaveExploits0References7
Citrix
Citrix
added 2021/05/13 12:00 a.m.11 views

SSON/Passthrough authentication not working with Edge browser

User tries to logon to MS Edge browser via SSON User is prompted to enter username and password instead of getting logged in automatically with SSON as expected...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.8 views

The vulnerability of the “Network” panel display on Google Chrome and Microsoft Edge browsers allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the “Network” panel display in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a...

4.3CVSS7AI score0.01905EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.11 views

The vulnerability in the web interface for supporting Web MIDI devices allows attackers to compromise the confidentiality of protected information. This vulnerability is present in browsers like Google Chrome and Microsoft Edge.

The vulnerability in web interfaces for supporting Web MIDI devices, such as Google Chrome and Microsoft Edge browsers, is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality of protected information through...

7.3CVSS7.6AI score0.01516EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.11 views

The vulnerability of the navigation function in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security restrictions.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created web page...

10CVSS7.5AI score0.01473EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.10 views

The vulnerability of the PDFium PDF-content processor in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the PDFium PDF-content processing component in Google Chrome and Microsoft Edge browsers is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created web page...

4.3CVSS6.7AI score0.01336EPSS
SaveExploits0References12Affected Software6
Krebs on Security
Krebs on Security
added 2021/03/10 1:42 a.m.159 views

Microsoft Patch Tuesday, March 2021 Edition

On the off chance you were looking for more security to-dos from Microsoft today…the company released software updates to plug more than 82 security flaws in Windows and other supported software. Ten of these earned Microsofts "critical" rating, meaning they can be exploited by malware or...

5.1CVSS0.4AI score0.80765EPSS
SaveExploits0
The Hacker News
The Hacker News
added 2021/01/13 5:01 a.m.127 views

Microsoft Issues Patches for Defender Zero-Day and 82 Other Windows Flaws

For the first patch Tuesday of 2021, Microsoft released security updates addressing a total of 83 flaws spanning as many as 11 products and services, including an actively exploited zero-day vulnerability. The latest security patches cover Microsoft Windows, Edge browser, ChakraCore, Office and...

8.8CVSS8.9AI score0.39392EPSS
SaveExploits0
ThreatPost
ThreatPost
added 2021/01/12 9:45 p.m.133 views

Critical Microsoft Defender Bug Actively Exploited; Patch Tuesday Offers 83 Fixes

Microsoft addressed 10 critical bugs, one under active exploit and another publicly known, in its January Patch Tuesday roundup of fixes. In total it patched 83 vulnerabilities. The most serious bug is a flaw in Microsoft’s Defender anti-malware software that allows remote attackers to infect...

3.3CVSS0.8AI score0.39392EPSS
SaveExploits0References11
ThreatPost
ThreatPost
added 2020/12/15 9:04 p.m.110 views

Firefox Patches Critical Mystery Bug, Also Impacting Google Chrome

A Mozilla Foundation update to the Firefox web browser, released Tuesday, tackles one critical vulnerability and a handful of high-severity bugs. The update, released as Firefox version 84, is also billed by Mozilla as boosting the browser’s performance and adding native support for macOS hardwar...

8.9AI score0.01876EPSS
SaveExploits1References20
The Hacker News
The Hacker News
added 2020/12/11 11:48 a.m.8 views

Watch Out! Adrozek Malware Hijacking Chrome, Firefox, Edge, Yandex Browsers

Microsoft on Thursday took the wraps off an ongoing campaign impacting popular web browsers that stealthily injects malware-infested ads into search results to earn money via affiliate advertising. "Adrozek," as it's called by the Microsoft 365 Defender Research Team, employs an "expansive, dynam...

5.8AI score
SaveExploits0
CNVD
CNVD
added 2020/12/09 12:00 a.m.6 views

Binary Vulnerability in Microsoft ChakraCore

Microsoft ChakraCore is a core part of the Chakra JavaScript engine for Microsoft's open source Microsoft Edge browser. A binary vulnerability exists in Microsoft ChakraCore, which can be exploited by attackers to cause a denial of service...

6.5AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:00 a.m.10 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser, which allows a hacker to exploit it to disclose protected information

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

4.2CVSS5.9AI score0.01647EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2020/11/19 12:00 a.m.11 views

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information.

The vulnerability of the JavaScript script handler ChakraCore in the Microsoft Edge browser is caused by an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

4.2CVSS5.6AI score0.02067EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/11/17 12:00 a.m.7 views

Null Pointer Reference Vulnerability in Microsoft ChakraCore

Microsoft ChakraCore is an open source ChakraJavaScript scripting engine used by Microsoft in the Edge browser, or as a stand-alone JavaScript engine. A null pointer reference vulnerability exists in Microsoft ChakraCore. An attacker could exploit this vulnerability to cause a software crash...

6.4AI score
SaveExploits0
CNVD
CNVD
added 2020/11/17 12:00 a.m.2 views

Microsoft ChakraCore has an out-of-bounds read vulnerability

Microsoft ChakraCore is an open source ChakraJavaScript scripting engine used by Microsoft in the Edge browser, or as a stand-alone JavaScript engine. An out-of-bounds read vulnerability exists in Microsoft ChakraCore. An attacker could exploit this vulnerability to cause a software crash...

6.4AI score
SaveExploits0
Rows per page
Query Builder