CVE-2024-0814

Incorrect security UI in Payments in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially spoof security UI via a crafted HTML page. Chromium security severity: Medium...

Design/Logic Flaw

Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2024-0804

Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

PT-2024-6479 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 124.0.6367.60 Description: The issue is related to an inappropriate implementation in the UI of Google Chrome, which can be exploited by a remote attacker to perform UI spoofing via a crafted HTML page. This ca...

CVE-2024-0809

Inappropriate implementation in Autofill in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page. Chromium security severity: Low...

CVE-2024-0804

Insufficient policy enforcement in iOS Security UI in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-0804

CVE-2024-0804 affects Google Chrome/Chromium: Insufficient policy enforcement in the iOS Security UI allows a crafted HTML page to leak cross-origin data. Public references indicate the issue is tied to Chrome/Chromium’s UI policy enforcement and was addressed in Chrome 121.0.6167.85 (and related...

CVE-2024-0814

CVE-2024-0814 describes an incorrect security UI in Google Chrome’s Payments component that could allow a remote attacker to spoof security UI via a crafted HTML page. Concrete details across connected sources specify: affected product/versions include Chrome/Chromium before 121.0.6167.85 (e.g., ...

CVE-2024-0812

CVE-2024-0812 is an issue in Google Chrome/Chromium prior to 121.0.6167.85, described as an inappropriate implementation in Accessibility that could allow remote object corruption via a crafted HTML page (severity High). The Connected documents corroborate that Chromium/Chrome updates addressing ...

CVE-2024-0812

Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-0807

Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-0807

Use after free in Web Audio in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

WP-Reply Notify <= 1.1 - Settings Update via CSRF

Description The plugin does not have a CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack. Make an admin open an HTML page containing the following: document.forms0.submit;...

PT-2024-1391 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.85 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Accessibility component, allowing a remote attacker to potentially exploi...

Out-of-bounds Write

V8 in Google Chrome is vulnerable to Out-of-bounds Write. The vulnerability is caused while V8's Maglev compiler attempts to compile a class that has a parent class. This can allow a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Type Confusion

Google Chrome is vulnerable to Type confusion The vulnerability is due to the access of resource using incompatible type which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Out-of-bounds Memory Access

chromium is vulnerable of Out-of-bounds Memory Access. The vulnerability due to a program accesses memory outside the bounds of what is allocated in V8 of Google Chrome prior to 120.0.6099.224. It allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

FreeBSD : electron26 -- Out of bounds memory access in V8 (2264566a-a890-46eb-a895-7881dd220bd0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 2264566a-a890-46eb-a895-7881dd220bd0 advisory. - Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker ...

openSUSE 15 Security Update : chromium (openSUSE-SU-2024:0025-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0025-1 advisory. - Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a craft...

FreeBSD : electron{26,27} -- multiple vulnerabilities (a8326b61-eda0-4c03-9a5b-49ebd8f41c1a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the a8326b61-eda0-4c03-9a5b-49ebd8f41c1a advisory. - Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker...