Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A boundary error within ICU component in Google Chrome allows a remote attacker to trick a user into visiting a malicious webpage to exploit a double free error and execute arbitrary code on the target system...

Chromium: CVE-2021-30535 Double free in ICU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

GLSA-202105-08 : ICU: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-08 ICU: Multiple vulnerabilities Multiple vulnerabilities have been discovered in ICU. Please review the upstream bugs referenced below for details. Impact : Remote attackers could cause a Denial of Service condition or...

ICU: Multiple vulnerabilities

Background ICU is a mature, widely used set of C/C++ and Java libraries providing Unicode and Globalization support for software applications. Description Multiple vulnerabilities have been discovered in ICU. Please review the upstream bugs referenced below for details. Impact Remote attackers...

Google Chrome Double Release Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A double-release vulnerability exists in ICU in versions prior to Google Chrome 91.0.4472.77, which can be exploited by a remote attacker to potentially exploit hea...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 91 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 91.0.4472.77 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

Huawei EulerOS: Security Advisory for icu (EulerOS-SA-2021-1801)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : icu (EulerOS-SA-2021-1801)

According to the version of the icu packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer...

SUSE: Security Advisory (SUSE-SU-2020:0819-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2015:0458-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:1401-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2017:2318-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2018:1401-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2020:1180-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-4602

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 91.0.4472.77 Description A double free issue in the ICU library of Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could enable the attacker to access...

org.elasticsearch:elasticsearch-analysis-icu (0.17.1), org.elasticsearch:elasticsearch-cloud-aws (0.17.1) +11 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.17.1)

org.elasticsearch:elasticsearch MAVEN version 0.17.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.1 - org.elasticsearch:elasticsearch-cloud-aws...

org.elasticsearch:elasticsearch-analysis-icu (0.7.1), org.elasticsearch:elasticsearch-client-groovy (0.7.1) +3 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.7.1)

org.elasticsearch:elasticsearch MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.7.1 - org.elasticsearch:elasticsearch-client-groov...

org.elasticsearch:elasticsearch-analysis-icu (0.17.7), org.elasticsearch:elasticsearch-cloud-aws (0.17.7) +11 more potentially affected by CVE-2020-7020 via org.elasticsearch:elasticsearch (0.17.7)

org.elasticsearch:elasticsearch MAVEN version 0.17.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.elasticsearch:elasticsearch and may be impacted: - org.elasticsearch:elasticsearch-analysis-icu 0.17.7 - org.elasticsearch:elasticsearch-cloud-aws...

icu:collator_rulebased_fuzzer: Crash in icu_68::CEFinalizer::modifyCE

Detailed Report: https://oss-fuzz.com/testcase?key=5738172053061632 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7040003f8120 Crash State: icu68::CEFinalizer::modifyCE...

icu:collator_rulebased_fuzzer: Crash in icu_68::UCharsTrie::branchNext

Detailed Report: https://oss-fuzz.com/testcase?key=5360850326126592 Project: icu Fuzzing Engine: libFuzzer Fuzz Target: collatorrulebasedfuzzer Job Type: libfuzzermsanicu Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f5b85a95b74 Crash State: icu68::UCharsTrie::branchNext...