592 matches found
Input validation
Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...
UBUNTU-CVE-2021-4098
Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...
CVE-2021-4098
CVE-2021-4098 affects Mojo in Google Chrome/Chromium prior to 96.0.4664.110, enabling a renderer-compromised remote attacker to potentially escape sandbox via a crafted HTML page. Affected: Chromium-based browsers; root cause: insufficient data validation in Mojo. Impact: sandbox escape risk as d...
CVE-2021-4098
Insufficient data validation in Mojo in Google Chrome prior to 96.0.4664.110 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...
karma-mojo enables OS Command Injection
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...
GHSA-PF8J-VHG8-XMC3 karma-mojo enables OS Command Injection
karma-mojo through 1.0.1 is vulnerable to Command Injection. It allows execution of arbitrary commands via the config argument...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1632-1 Rating: important References: 1192310 1192734 1193519 1193713 Cross-References: CVE-2021-38005 CVE-2021-38006 CVE-2021-38007 CVE-2021-38008 CVE-2021-38009 CVE-2021-38010 CVE-2021-38011 CVE-2021-38012...
openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1600-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1600-1 advisory. - Insufficient data validation in Mojo. CVE-2021-4098 - Use after free in Swiftshader. CVE-2021-4099 - Object lifecycle issue in ANGLE...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1600-1 Rating: important References: 1193713 Cross-References: CVE-2021-4098 CVE-2021-4099 CVE-2021-4100 CVE-2021-4101 CVE-2021-4102 Affected Products: openSUSE Backports SLE-15-SP3 An update that fixes 5...
The vulnerability of the Mojo messaging library in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.
The vulnerability of the Mojo messaging library in Microsoft Edge and Google Chrome lies in the insufficient validation of input data during the processing of HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created malicious web...
Google Chrome Mojo code execution vulnerability
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which stems from a lack of validation of data in Mojo. A remote attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code on the system...
Chromium: CVE-2021-4098 Insufficient data validation in Mojo
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
FreeBSD : chromium -- multiple vulnerabilities (fb9ba490-5cc4-11ec-aac7-3065ec8fd3ec)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the fb9ba490-5cc4-11ec-aac7-3065ec8fd3ec advisory. - Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to...
Microsoft Edge (Chromium) < 96.0.1054.57 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 96.0.1054.57. It is, therefore, affected by multiple vulnerabilities as referenced in the December 14, 2021 advisory. - Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to...
Google Chrome < 96.0.4664.110 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 96.0.4664.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 202201stable-channel-update-for-desktop19 advisory. - Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.9...
Google Chrome 输入验证错误漏洞
Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which stems from a lack of validation of data in Mojo. A remote attacker could exploit this vulnerability to cause a denial of service or execute arbitrary code on the system...
Google Chrome < 96.0.4664.110 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 96.0.4664.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 202201stable-channel-update-for-desktop19 advisory. - Heap buffer overflow in Task Manager in Google Chrome prior to 97.0.4692.99...
CVE-2021-38358
The MoolaMojo WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the classes parameter found in the /views/button-generator.html.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 0.7.4.1...
openSUSE Security Update : Chromium (openSUSE-2021-629)
This update for chromium fixes the following issues : - Chromium was updated to 90.0.4430.93 boo1184764,boo1185047,boo1185398 - CVE-2021-21227: Insufficient data validation in V8. - CVE-2021-21232: Use after free in Dev Tools. - CVE-2021-21233: Heap buffer overflow in ANGLE. - CVE-2021-21228:...
The vulnerability of the Mojo browser platform for Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.
The vulnerability of the Mojo browser platform for Google Chrome and Microsoft Edge is related to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...