Lucene search
K

280 matches found

Cvelist
Cvelist
added 2021/08/26 5:40 p.m.15 views

CVE-2021-30601

Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

9.1AI score0.00253EPSS
Exploits1References5
Kaspersky
Kaspersky
added 2021/08/25 12:0 a.m.35 views

KLA12268 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in ANGLE can be exploited to cause denial of service or execute arbitrar...

8.8CVSS9.5AI score0.01901EPSS
Exploits6References4
OPENSUSE Linux
OPENSUSE Linux
added 2021/08/23 12:0 a.m.43 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1180-1 Rating: important References: 1189490 Cross-References: CVE-2021-30598 CVE-2021-30599 CVE-2021-30600 CVE-2021-30601 CVE-2021-30602 CVE-2021-30603 CVE-2021-30604 Affected Products: openSUSE Backports...

8.8CVSS9.2AI score0.01901EPSS
Exploits6References1
OPENSUSE Linux
OPENSUSE Linux
added 2021/08/21 12:0 a.m.58 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1172-1 Rating: important References: 1189490 Cross-References: CVE-2021-30598 CVE-2021-30599 CVE-2021-30600 CVE-2021-30601 CVE-2021-30602 CVE-2021-30603 CVE-2021-30604 Affected Products: openSUSE Leap 15.2 An...

8.8CVSS9.2AI score0.01901EPSS
Exploits6References1
OpenVAS
OpenVAS
added 2021/08/21 12:0 a.m.22 views

openSUSE: Security Advisory for chromium (openSUSE-SU-2021:1172-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.4AI score0.01901EPSS
Exploits6References2
Tenable Nessus
Tenable Nessus
added 2021/08/21 12:0 a.m.41 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1172-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1172-1 advisory. - Type Confusion in V8. CVE-2021-30598, CVE-2021-30599 - Use after free in Printing. CVE-2021-30600 - Use after free in Extensions API...

8.8CVSS7AI score0.01901EPSS
Exploits6References16
Microsoft CVE
Microsoft CVE
added 2021/08/19 7:0 a.m.44 views

Chromium: CVE-2021-30601 Use after free in Extensions API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.00253EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2021/08/19 12:0 a.m.54 views

Microsoft Edge (Chromium) < 92.0.902.78 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 92.0.902.78. It is, therefore, affected by multiple vulnerabilities as referenced in the August 19, 2021 advisory. - Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to...

8.8CVSS7.4AI score0.01901EPSS
Exploits5References13
Kaspersky
Kaspersky
added 2021/08/19 12:0 a.m.30 views

KLA12267 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in ANGLE can be exploited to cause denial of service or...

8.8CVSS9.4AI score0.01901EPSS
Exploits5References9
CNVD
CNVD
added 2021/08/18 12:0 a.m.19 views

Google Chrome Post-release Reuse Vulnerability (CNVD-2021-68454)

Chrome is a web browsing tool developed by Google. A post-release reuse vulnerability exists in the Extensions API in versions of Google Chrome prior to 92.0.4515.159. An attacker could exploit this vulnerability to potentially cause heap corruption via a crafted HTML page...

6.8CVSS3.6AI score0.00253EPSS
Exploits1Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/08/16 12:0 a.m.50 views

Google Chrome < 92.0.4515.159 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 92.0.4515.159. It is, therefore, affected by multiple vulnerabilities as referenced in the 202108stable-channel-update-for-desktop advisory. - Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a...

8.8CVSS7.5AI score0.01901EPSS
Exploits6References15
CNNVD
CNNVD
added 2021/08/16 12:0 a.m.1 views

Microsoft Edge 资源管理错误漏洞

Chrome is a web browsing tool developed by Google. A post-release reuse vulnerability exists in the Extensions API in versions of Google Chrome prior to 92.0.4515.159. An attacker could exploit this vulnerability to potentially cause heap corruption via a crafted HTML page...

8.8CVSS7AI score0.00253EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2021/08/16 12:0 a.m.48 views

Google Chrome < 92.0.4515.159 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 92.0.4515.159. It is, therefore, affected by multiple vulnerabilities as referenced in the 202108stable-channel-update-for-desktop advisory. - Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remo...

8.8CVSS7.4AI score0.01901EPSS
Exploits6References15
FreeBSD
FreeBSD
added 2021/08/16 12:0 a.m.70 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 9 security fixes, including: 1234764 High CVE-2021-30598: Type Confusion in V8. Reported by Manfred Paul on 2021-07-30 1234770 High CVE-2021-30599: Type Confusion in V8. Reported by Manfred Paul on 2021-07-30 1231134 High CVE-2021-30600: Use after fr...

8.8CVSS8.9AI score0.01901EPSS
Exploits6References1
CNVD
CNVD
added 2019/06/28 12:0 a.m.1 views

Google Chrome Security Bypass Vulnerability (CNVD-2019-22832)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the Extensions API in versions of Google Chrome prior to 68.0.3440.75, which stems from the program failing to adequately validate data. An attacker can exploit the vulnerability to bypass navigati...

6.5CVSS6.6AI score0.00103EPSS
Exploits0References1
OSV
OSV
added 2019/06/27 5:15 p.m.3 views

CVE-2018-6176

Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension...

7.8CVSS5.8AI score0.00085EPSS
Exploits0References2
NVD
NVD
added 2019/06/27 5:15 p.m.15 views

CVE-2018-6176

Insufficient file type enforcement in Extensions API in Google Chrome prior to 68.0.3440.75 allowed a remote attacker who had compromised the renderer process to perform privilege escalation via a crafted Chrome Extension...

7.8CVSS7.7AI score0.00085EPSS
Exploits0References2
NVD
NVD
added 2019/06/27 5:15 p.m.16 views

CVE-2018-6138

Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

8.1CVSS6.4AI score0.00067EPSS
Exploits0References2
OSV
OSV
added 2019/06/27 5:15 p.m.1 views

CVE-2018-6138

Insufficient policy enforcement in Extensions API in Google Chrome prior to 67.0.3396.62 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

8.1CVSS5.8AI score0.00067EPSS
Exploits0References2
NVD
NVD
added 2019/06/27 5:15 p.m.15 views

CVE-2018-16064

Insufficient data validation in Extensions API in Google Chrome prior to 68.0.3440.75 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...

6.5CVSS6.1AI score0.00103EPSS
Exploits0References2
Rows per page
Query Builder