JerryScript has a binary vulnerability (CNVD-2020-72431)

JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...

JerryScript has a binary vulnerability (CNVD-2020-72424)

JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...

JerryScript has a binary vulnerability (CNVD-2020-72423)

JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...

JerryScript has a binary vulnerability (CNVD-2020-72404)

JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...

PT-2020-5276

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 10.1.0.37527 Foxit PhantomPDF affected versions not specified Description A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader. A specially crafted PDF document can trigge...

PT-2020-5273

Name of the Vulnerable Software and Affected Versions Foxit Software’s PDF Reader version 10.1.0.37527 Foxit PhantomPDF affected versions not specified Description A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader. A specially crafted PDF document can...

PT-2020-5277

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 10.1.0.37527 Description A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader. A specially crafted PDF document can trigger reuse of previously free memory, which can lead...

PT-2020-5251

Name of the Vulnerable Software and Affected Versions Foxit PDF Reader version 10.1.0.37527 Description A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader. A specially crafted PDF document can trigger reuse of previously free memory, which can lead...

Foxit Reader JavaScript media openPlayer type confusion vulnerability

Summary A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the...

Foxit Reader JavaScript choice field use-after-free vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. Google chrome has a security vulnerability that stems from insufficient data validation in V8. A remote attacker can exploit the vulnerability to conduct a potential attack by leveraging heap corruption via a crafted HTML page...

Google Chrome Information Disclosure Vulnerability

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in versions prior to Google chrome 87.0.4280.88 that stems from the use of uninitialized V8...

PT-2020-5575

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.88 Description The issue is related to an uninitialized use in the V8 JavaScript engine of Google Chrome, which can allow a remote attacker to obtain potentially sensitive information from process...

PT-2020-5734

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 87.0.4280.88 Description: The issue is related to insufficient data validation in the V8 JavaScript engine of Google Chrome, which can lead to heap corruption. A remote attacker can potentially exploit this by...

Stack Overflow Out-of-Bounds Write Vulnerability in Microsoft ChakraCore

Microsoft ChakraCore is an open source ChakraJavaScript scripting engine used by Microsoft in the Edge browser, or as a stand-alone JavaScript engine. A stack overflow out-of-bounds write vulnerability exists in Microsoft ChakraCore. An attacker could exploit this vulnerability to cause a softwar...

CVE-2020-26969

Mozilla developers reported memory safety bugs present in Firefox 82. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 83...

CVE-2020-26962

Cross-origin iframes that contained a login form could have been recognized by the login autofill service, and populated. This could have been used in clickjacking attacks, as well as be read across partitions in dynamic first party isolation. This vulnerability affects Firefox 83...

CVE-2020-26963

Repeated calls to the history and location interfaces could have been used to hang the browser. This was addressed by introducing rate-limiting to these API calls. This vulnerability affects Firefox 83...

CVE-2020-26960

If the Compact method was called on an nsTArray, the array could have been reallocated without updating other pointers, leading to a potential use-after-free and exploitable crash. This vulnerability affects Firefox 83, Firefox ESR 78.5, and Thunderbird 78.5...

CVE-2020-26951

A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...