firefox: Use-after-free in the DOM: Core & HTML component

A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the DOM: Core & HTML component...

Alexis H. Munsayac seroval improper output handling vulnerability

Versions prior to 1.0.0 and versions 1.5.5 through 1.6.10 of Alexis H. Munsayac contain a security vulnerability. This vulnerability arises because the JavaScript output API fails to escape HTML script elements when serializing source code containing a minus sign. When an application uses untrust...

Google Chrome Microsoft Edge Access Information Disclosure

The Loader component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper authorization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the Views component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploiting this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

GPU Component Access Protected Information

The vulnerability in the GPU components of Google Chrome and Microsoft Edge is related to a flaw in the source verification mechanism. Exploitation of this vulnerability enables a remote attacker to gain access to protected information via a specially crafted HTML page...

Site Isolation Component Google Chrome Microsoft Edge DoS

The vulnerability in the Site Isolation component of Google Chrome and Microsoft Edge web browsers is related to a lack of security mechanisms for protecting sensitive information. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information, potentially...

USB Component DoS

The vulnerability in the USB components of Google Chrome and Microsoft Edge is related to insecure privilege management. Exploitation of this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...

SurfaceCapture Component Google Chrome Microsoft Edge Access Information

The vulnerability in the SurfaceCapture component of Google Chrome and Microsoft Edge web browsers is related to a flaw in the source verification mechanism. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Input component of Google DoS

The Input component vulnerability in Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Presentation Component Compromise

The vulnerability in the Presentation component of Google Chrome and Microsoft Edge web browsers is related to the implementation of client-side security features. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected information by using a speciall...

Google Chrome Microsoft Edge DoS

The vulnerability in the Receiver component of Google Chrome and Microsoft Edge is related to a lack of secure information handling mechanisms. Exploitation of this vulnerability enables a remote attacker to cause a denial of service by using a specially crafted HTML page...

WebAppInstalls Component Compromise Protected Information

The vulnerability in the WebAppInstalls component of Google Chrome and Microsoft Edge involves the user interface’s false representation of critical information. Exploitation of this vulnerability enables a remote attacker to compromise the integrity of protected data by using a specially crafted...

Google Chrome Microsoft Edge DoS

The vulnerability in the Password component of Google Chrome and Microsoft Edge web browsers is related to insufficient validation of user-supplied protected information. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by using a specially crafted HTML...

Google Chrome Microsoft Edge DoS

The vulnerability in the Views component of Google Chrome and Microsoft Edge web browsers is related to improper use of memory after it has been freed. Exploiting this vulnerability enables a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The UI component vulnerability in Google Chrome and Microsoft Edge is related to insufficient validation of user-supplied protected information. Exploitation of this vulnerability may allow a remote attacker to cause a denial of service by sending a specially crafted HTML page...

Codecs Component Protected Information Access

The vulnerability in the Codecs component of Google Chrome and Microsoft Edge web browsers is related to errors in variable initialization. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

PerformanceAPIs Component Google Chrome Microsoft Edge Access Protected Information

The vulnerability in the PerformanceAPIs component of Google Chrome and Microsoft Edge web browsers is related to information disclosure due to a mismatch. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability in the Views component of Google Chrome and Microsoft Edge web browsers is related to authorization errors. Exploiting this vulnerability allows a remote attacker to cause a denial of service by using a specially crafted HTML page...

Web Packaging DoS

The Webpacking component vulnerability in Google Chrome and Microsoft Edge web browsers is related to memory usage after it has been freed. Exploiting this vulnerability allows a remote attacker to cause a denial of service by sending a specially crafted HTML page...

CrashReporting Component Protected Information Access

The vulnerability in the CrashReporting component of Google Chrome and Microsoft Edge web browsers involves reading protected information beyond its permitted buffer boundaries. Exploitation of this vulnerability may allow a remote attacker to gain access to protected information via a specially...