Lucene search
+L

852 matches found

NVD
NVD
added 2021/04/26 5:15 p.m.15 views

CVE-2021-21207

Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS0.00943EPSS
SaveExploits0References7
OSV
OSV
added 2021/04/26 5:15 p.m.2 views

DEBIAN-CVE-2021-21207

Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS7.9AI score0.00943EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/26 5:15 p.m.9 views

CVE-2021-21207

Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS9.4AI score
SaveExploits0References7
UbuntuCve
UbuntuCve
added 2021/04/26 5:15 p.m.22 views

CVE-2021-21207

Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS7.2AI score0.00943EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/26 5:15 p.m.5 views

UBUNTU-CVE-2021-21207

Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS7.3AI score0.00943EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/26 5:15 p.m.21 views

Design/Logic Flaw

Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

6.8CVSS9AI score0.00943EPSS
SaveExploits0References7Affected Software3
Debian CVE
Debian CVE
added 2021/04/26 4:25 p.m.25 views

CVE-2021-21207

Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS9.5AI score0.00943EPSS
SaveExploits0
CVE
CVE
added 2021/04/26 4:25 p.m.220 views

CVE-2021-21207

CVE-2021-21207 is a use-after-free in IndexedDB in Google Chrome prior to 90.0.4430.72. The vulnerability could allow an attacker who convinces a user to install a malicious Chrome Extension to potentially perform a sandbox escape via a crafted extension. Affected component is the IndexedDB imple...

8.6CVSS9AI score0.00943EPSS
SaveExploits0References7Affected Software1
AlpineLinux
AlpineLinux
added 2021/04/26 4:25 p.m.56 views

CVE-2021-21207

Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS9.2AI score0.00943EPSS
SaveExploits0
Cvelist
Cvelist
added 2021/04/26 4:25 p.m.24 views

CVE-2021-21207

Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

9.3AI score0.00943EPSS
SaveExploits0References7
Veracode
Veracode
added 2021/04/21 5:43 p.m.22 views

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use-after-free in IndexedDB allows an attacker to execute arbitrary code on the host OS...

8.6CVSS4AI score0.00943EPSS
SaveExploits0References11Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:0 a.m.8 views

The vulnerability of the IndexedDB component in browsers such as Google Chrome and Microsoft Edge allows a hacker to gain unauthorized access to protected information.

The vulnerability of the IndexedDB component in Google Chrome and Microsoft Edge relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page...

7.3CVSS7.6AI score0.00943EPSS
SaveExploits0References12Affected Software6
CNVD
CNVD
added 2021/04/16 12:0 a.m.21 views

Google Chrome IndexedDB Code Execution Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in IndexedDB in versions of Google Chrome prior to 90.0.4430.72. A remote attacker can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

8.6CVSS7.6AI score0.00943EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2021/04/15 6:40 p.m.75 views

Chromium: CVE-2021-21207 Use after free in IndexedDB

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.6CVSS8.8AI score0.00943EPSS
SaveExploits0
CNNVD
CNNVD
added 2021/04/14 12:0 a.m.8 views

谷歌 Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in IndexedDB in versions of Google Chrome prior to 90.0.4430.72. A remote attacker can exploit this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

8.6CVSS8.8AI score0.00943EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.195 views

NewStart CGSL MAIN 4.06 : firefox Multiple Vulnerabilities (NS-SA-2021-0004)

The remote NewStart CGSL host, running version MAIN 4.06, has firefox packages installed that are affected by multiple vulnerabilities: - When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable...

10CVSS8.7AI score0.43677EPSS
SaveExploits29References66
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.218 views

NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0002)

The remote NewStart CGSL host, running version MAIN 4.06, has thunderbird packages installed that are affected by multiple vulnerabilities: - When removing data about an origin whose tab was recently closed, a use-after-free could occur in the Quota manager, resulting in a potentially exploitable...

10CVSS8.8AI score0.43677EPSS
SaveExploits31References72
Tenable Nessus
Tenable Nessus
added 2021/01/29 12:0 a.m.41 views

CentOS 8 : thunderbird (CESA-2019:3237)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:3237 advisory. - Mozilla: Use-after-free when creating index updates in IndexedDB CVE-2019-11757 - Mozilla: Potentially exploitable crash due to 360 Total Security...

8.8CVSS7.6AI score0.06707EPSS
SaveExploits3References10
Tenable Nessus
Tenable Nessus
added 2021/01/29 12:0 a.m.268 views

CentOS 8 : firefox (CESA-2019:3196)

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:3196 advisory. - Mozilla: Use-after-free when creating index updates in IndexedDB CVE-2019-11757 - Mozilla: Potentially exploitable crash due to 360 Total Security...

8.8CVSS7.6AI score0.06707EPSS
SaveExploits3References10
BDU FSTEC
BDU FSTEC
added 2021/01/13 12:0 a.m.6 views

The vulnerability of the application programming interface of the IndexedDB client storage in browsers such as Firefox, Firefox ESR, and the Thunderbird email client allows a hacker to induce a service failure.

The vulnerability of the application programming interface of the IndexedDB client storage engine in browsers such as Firefox, Firefox ESR, and the email client Thunderbird is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause servic...

10CVSS7.4AI score0.02665EPSS
SaveExploits0References15Affected Software10
Rows per page
Query Builder