18440 matches found
Content Bypass
chrome is vulnerable to a Content Bypass. The vulnerability is due to inappropriate implementation in Networks within Google Chrome versions, allows a remote attacker to bypass mixed content policy via a crafted HTML page...
UI Spoofing
chrome is vulnerable to UI spoofing. The vulnerability is due to inappropriate implementation in Prompts within Google Chrome, allows a remote attacker who convinces a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page...
UI Spoofing
chrome is vulnerable to UI spoofing. The vulnerability is due to insufficient data validation in the Downloads component of Google Chrome, allows a remote attacker to perform UI spoofing via a crafted HTML page...
Navigation Bypass
chrome is vulnerable to Navigation Bypass. The vulnerability is due to insufficient policy enforcement in Site Isolation within Google Chrome, allows a remote attacker to bypass navigation restrictions via a crafted HTML page...
CVE-2024-22640
TCPDF version =6.6.5 is vulnerable to ReDoS Regular Expression Denial of Service if parsing an untrusted HTML page with a crafted color...
CVE-2024-22640
TCPDF (PHP class for generating PDFs) is affected by CVE-2024-22640. The root cause is a Regular Expression Denial of Service in parsing untrusted HTML when a crafted color is processed, with affected versions reported as
SUSE CVE-2024-3834
Use after free in Downloads in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2024-3833
Object corruption in WebAssembly in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...
SUSE CVE-2024-3840
Insufficient policy enforcement in Site Isolation in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. Chromium security severity: Medium...
Google Chrome Security Bypass Vulnerability (CNVD-2024-29279)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that can be exploited by an attacker to bypass mixed-content policies via a crafted HTML page...
Google Chrome Security Bypass Vulnerability (CNVD-2024-29277)
Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a security bypass vulnerability that can be exploited by attackers to bypass navigation restrictions via a crafted HTML page...
NewStart CGSL CORE 5.04 / MAIN 5.04 : sqlite Vulnerability (NS-SA-2024-0011)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has sqlite packages installed that are affected by a vulnerability: - Out of bounds write in SQLite in Google Chrome prior to 79.0.3945.79 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2024-3914
Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-3914
Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-3914
Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-3914
Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-3914
Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-3914
Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-3914
CVE-2024-3914 is a use-after-free in V8 within Google Chrome/Chromium before 124.0.6367.60, allowing potential heap corruption via a crafted HTML page. Public references show this vulnerability being fixed in Chromium/Chrome updates (e.g., ChromeOS/Chrome updates around 124.0.6367.x). The connect...
CVE-2024-3847
Insufficient policy enforcement in WebUI in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to bypass content security policy via a crafted HTML page. Chromium security severity: Low...