Security Vulnerabilities fixed in Firefox 82 — Mozilla

A use-after-free bug in the usersctp library was reported upstream. We assume this could have led to memory corruption and a potentially exploitable crash. In the crossbeam rust crate, the bounded channel incorrectly assumed that Vec::fromiter had allocated capacity that was the same as the numbe...

PT-2020-6729

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 82 Description The issue allows an attacker to probe whether an external protocol handler is registered by distinguishing the broken image size of a valid external protocol handler from a non-existent one in an image...

chromium-browser: Inappropriate implementation in external protocol handlers

Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

DEBIAN-CVE-2020-6522

Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-6522

Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-6522

Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-6522

Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

CVE-2020-6522: Undefined Security Weakness

Inappropriate implementation in external protocol handlers in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

PT-2020-5701

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to an inappropriate implementation in external protocol handlers, which could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

Google Chrome Information Disclosure

The vulnerability of Google Chrome relates to improper control of access to a critical resource when processing external protocols. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to information and compromise its integrity and availability throug...

openSUSE Security Update : chromium (openSUSE-2019-2692)

This update for chromium fixes the following issues : Chromium was updated to 79.0.3945.79 boo1158982 - CVE-2019-13725: Fixed a use after free in Bluetooth - CVE-2019-13726: Fixed a heap buffer overflow in password manager - CVE-2019-13727: Fixed an insufficient policy enforcement in WebSockets -...

chromium-browser: Incorrect security UI in external protocol handling

Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page...

CVE-2019-13743

Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page...

CVE-2019-13743

Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page...

DEBIAN-CVE-2019-13743

Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page...

UBUNTU-CVE-2019-13743

Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page...

CVE-2019-13743

Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page...

CVE-2019-13743

CVE-2019-13743 affects Google Chrome/Chromium prior to version 79.0.3945.79, where an incorrect security UI in external protocol handling could allow a remote attacker to spoof the security UI via a crafted HTML page. Impact is spoofing of security prompts; practical exploitation details are not ...

CVE-2019-13743

Incorrect security UI in external protocol handling in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to spoof security UI via a crafted HTML page...

PT-2019-4854

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.79 Description The issue is related to an insufficient data validation mechanism in the external protocol handling of Google Chrome. This can be exploited by a remote attacker using a crafted HTML page...