Lucene search
+L

525 matches found

BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.5 views

The vulnerability of Google Chrome’s Intents function allows attackers to circumvent existing access restrictions.

The vulnerability of Google Chrome’s Intents function is related to privilege management errors. Exploiting this vulnerability could allow a hacker to circumvent existing access restrictions...

7.8CVSS7.3AI score0.00243EPSS
Exploits0References11Affected Software6
CNNVD
CNNVD
added 2021/12/08 12:0 a.m.4 views

Samsung SMR 安全漏洞

Samsung SemRewardManager is an application for Samsung Samsung mobile devices. An information disclosure vulnerability exists in Samsung SemRewardManager that stems from improper use of implicit intent in SemRewardManager, which can be exploited by an attacker to access the BSSID...

4CVSS5.6AI score0.00097EPSS
Exploits0References2
NVD
NVD
added 2021/11/23 10:15 p.m.25 views

CVE-2021-38000

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page...

6.1CVSS0.04485EPSS
Exploits1References5
Prion
Prion
added 2021/11/23 10:15 p.m.28 views

Input validation

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page...

5.8CVSS6.6AI score0.04485EPSS
Exploits1References4Affected Software3
OSV
OSV
added 2021/11/23 10:15 p.m.3 views

UBUNTU-CVE-2021-38000

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page...

6.1CVSS7.2AI score0.04485EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2021/11/23 9:30 p.m.45 views

CVE-2021-38000

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page...

6.1CVSS7.4AI score0.04485EPSS
Exploits1
Cvelist
Cvelist
added 2021/11/23 9:30 p.m.32 views

CVE-2021-38000

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page...

6.7AI score0.04485EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2021/11/23 12:0 a.m.120 views

CVE-2021-38000

Insufficient validation of untrusted input in Intents in Google Chrome on Android prior to 95.0.4638.69 allowed a remote attacker to arbitrarily browser to a malicious URL via a crafted HTML page. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...

6.1CVSS3.7AI score0.04485EPSS
In wildExploits1References6
Veracode
Veracode
added 2021/11/09 3:14 p.m.47 views

Remote Code Execution (RCE)

chrome is vulnerable to remote code execution. The vulnerability exists due to an Insufficient validation of untrusted input in Intents...

6.1CVSS3.8AI score0.04485EPSS
Exploits1References6Affected Software2
Microsoft CVE
Microsoft CVE
added 2021/10/29 4:52 p.m.124 views

Chromium: CVE-2021-38000 Insufficient validation of untrusted input in Intents

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that exploits for this vulnerability exist in the wild...

6.1CVSS7.7AI score0.04485EPSS
Exploits1
The Hacker News
The Hacker News
added 2021/10/29 4:8 a.m.127 views

Google Releases Urgent Chrome Update to Patch 2 Actively Exploited 0-Day Bugs

Google on Thursday rolled out an emergency update for its Chrome web browser, including fixes for two zero-day vulnerabilities that it says are being actively exploited in the wild. Tracked as CVE-2021-38000 and CVE-2021-38003, the weaknesses relate to insufficient validation of untrusted input i...

9.6CVSS1.7AI score0.70435EPSS
Exploits16
CNVD
CNVD
added 2021/10/29 12:0 a.m.51 views

Google Chrome under-validation vulnerability for untrusted inputs

Chrome, a simple and efficient web browsing tool developed by Google, is vulnerable to insufficient validation of untrusted input in Intents in versions prior to Google Chrome 95.0.4638.69. A remote attacker could exploit this vulnerability to arbitrarily browse malicious URLs via crafted HTML...

6.1CVSS4.7AI score0.04485EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2021/10/28 12:0 a.m.131 views

Google Chrome < 95.0.4638.69 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 95.0.4638.69. It is, therefore, affected by multiple vulnerabilities as referenced in the 202110stable-channel-update-for-desktop28 advisory. - Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69...

9.6CVSS7.8AI score0.36238EPSS
Exploits5References17
Tenable Nessus
Tenable Nessus
added 2021/10/28 12:0 a.m.101 views

Google Chrome < 95.0.4638.69 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 95.0.4638.69. It is, therefore, affected by multiple vulnerabilities as referenced in the 202110stable-channel-update-for-desktop28 advisory. - Inappropriate implementation in V8 in Google Chrome prior to 95.0.4638.69...

9.6CVSS7.8AI score0.36238EPSS
Exploits5References17
OSV
OSV
added 2021/08/03 8:15 p.m.2 views

DEBIAN-CVE-2021-30580

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

6.5CVSS6.2AI score0.01341EPSS
Exploits0References1
OSV
OSV
added 2021/08/03 8:15 p.m.6 views

CVE-2021-30580

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

6.5CVSS5.2AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2021/08/03 8:15 p.m.19 views

CVE-2021-30580

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

6.5CVSS6.6AI score0.01341EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/03 8:15 p.m.2 views

CVE-2021-30580

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

6.5CVSS6.5AI score0.01341EPSS
Exploits0References9
OSV
OSV
added 2021/08/03 8:15 p.m.4 views

UBUNTU-CVE-2021-30580

Insufficient policy enforcement in Android intents in Google Chrome prior to 92.0.4515.107 allowed an attacker who convinced a user to install a malicious application to obtain potentially sensitive information via a crafted HTML page...

6.5CVSS6.6AI score0.01341EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2021/08/02 12:0 a.m.5 views

The vulnerability of the Android Intents component in the Google Chrome web browser for Android allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the Android Intents component in the Google Chrome web browser for Android is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to protected information by opening a...

6.4CVSS6.5AI score0.01341EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder