Lucene search
K

136 matches found

CVE
CVE
added 2022/02/11 11:36 p.m.101 views

CVE-2022-0115

This CVE corresponds to Google Chrome/Chromium’s Uninitialized use in the File API, allowing a remote attacker to potentially cause out-of-bounds memory access via a crafted HTML page. Public sources confirm the issue affects Chrome/Chromium prior to version 97.0.4692.71 and that the vulnerabilit...

8.8CVSS8.3AI score0.00531EPSS
Exploits1References5Affected Software1
Debian CVE
Debian CVE
added 2022/02/11 11:36 p.m.21 views

CVE-2022-0115

Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

8.8CVSS8.9AI score0.00531EPSS
Exploits1
Cvelist
Cvelist
added 2022/02/11 11:36 p.m.15 views

CVE-2022-0115

Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

8.7AI score0.00531EPSS
Exploits1References5
Mageia
Mageia
added 2022/02/02 9:29 p.m.58 views

Updated chromium-browser-stable packages fix security vulnerability

CVE-2022-0096: Use after free in Storage. CVE-2022-0097: Inappropriate implementation in DevTools. CVE-2022-0098: Use after free in Screen Capture. CVE-2022-0099: Use after free in Sign-in. CVE-2022-0100: Heap buffer overflow in Media streams API. CVE-2022-0101: Heap buffer overflow in Bookmarks...

9.6CVSS8.5AI score0.11727EPSS
Exploits21References3
Veracode
Veracode
added 2022/01/15 12:7 a.m.18 views

Denial Of Service (DoS)

chromium is vulnerable to denial of service DoS. The vulnerability exists through the Uninitialized Use in File API...

8.8CVSS2.2AI score0.00531EPSS
Exploits1References9Affected Software2
Microsoft CVE
Microsoft CVE
added 2022/01/06 8:0 a.m.18 views

Chromium: CVE-2022-0115 Uninitialized Use in File API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.00531EPSS
Exploits1
OPENSUSE Linux
OPENSUSE Linux
added 2021/12/28 12:0 a.m.53 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1632-1 Rating: important References: 1192310 1192734 1193519 1193713 Cross-References: CVE-2021-38005 CVE-2021-38006 CVE-2021-38007 CVE-2021-38008 CVE-2021-38009 CVE-2021-38010 CVE-2021-38011 CVE-2021-38012...

9.6CVSS9.3AI score0.05459EPSS
Exploits2References4
NVD
NVD
added 2021/12/23 1:15 a.m.15 views

CVE-2021-4057

Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.03637EPSS
Exploits0References6
OSV
OSV
added 2021/12/23 1:15 a.m.4 views

CVE-2021-4057

Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.3AI score
Exploits0References6
ATTACKERKB
ATTACKERKB
added 2021/12/23 1:15 a.m.6 views

CVE-2021-4057

Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.8AI score0.03637EPSS
Exploits0References8
UbuntuCve
UbuntuCve
added 2021/12/23 1:15 a.m.33 views

CVE-2021-4057

Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.03637EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2021/12/23 12:45 a.m.26 views

CVE-2021-4057

Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.6AI score0.03637EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2021/12/23 12:45 a.m.33 views

CVE-2021-4057

Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.3AI score0.03637EPSS
Exploits0
CVE
CVE
added 2021/12/23 12:45 a.m.137 views

CVE-2021-4057

CVE-2021-4057 is a use-after-free in Chromium’s file API prior to 96.0.4664.93. Multiple connected advisories describe it as allowing a remote attacker who gains renderer access to potentially trigger heap corruption. The vulnerability is among a set of Chromium issues fixed in version 96.0.4664....

8.8CVSS9AI score0.03637EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2021/12/23 12:45 a.m.14 views

CVE-2021-4057

Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

9.3AI score0.03637EPSS
Exploits0References6
Veracode
Veracode
added 2021/12/12 10:8 a.m.29 views

Remote Code Execution (RCE)

qt5-qtwebengine is vulnerable to remote code execution. A use after free security issue has been found in the file API component of the Chromium browser...

8.8CVSS3.2AI score0.03637EPSS
Exploits0References10Affected Software3
Microsoft CVE
Microsoft CVE
added 2021/12/10 8:0 a.m.32 views

Chromium: CVE-2021-4057 Use after free in file API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.03637EPSS
Exploits0
CNVD
CNVD
added 2021/12/08 12:0 a.m.33 views

Google Chrome file API code execution vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which stems from post-release usage in the File API. A remote attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code on the system...

8.8CVSS5.1AI score0.03637EPSS
Exploits0References1
Kaspersky
Kaspersky
added 2021/12/06 12:0 a.m.480 views

KLA12373 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, inject malicious code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free...

8.8CVSS9.8AI score0.03637EPSS
Exploits0References3
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2021/12/06 12:0 a.m.56 views

Stable Channel Update for Desktop

The Stable channel has been updated to 96.0.4664.93 for Windows, Mac and Linux which will roll out over the coming days/weeks. Extended stable channel has also been updated to 96.0.4664.93 for Windows and Mac which will roll out over the coming days/weeks A full list of changes in this build is...

8.8CVSS9.1AI score0.03637EPSS
Exploits1Affected Software1
Rows per page
Query Builder