Google Chrome < 94.0.4606.54 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 94.0.4606.54. It is, therefore, affected by multiple vulnerabilities as referenced in the 202109stable-channel-update-for-desktop21 advisory. - Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54...

Information Disclosure

chromium:edge is vulnerable to information disclosure. Inappropriate implementation in Navigation in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Cross-site Scripting (XSS) - DOM in mineweb/minewebcms

✍️ Description A malicious actor is able to add a malicious payload as a new Navigation Bar Link Title, and after every time any users visit the main root page of the website, the XSS payload is executed and the session of whoever visits the site is compromised. 🕵️‍♂️ Proof of Concept 1; Create a...

Security Vulnerabilities fixed in Firefox ESR 78.14 — Mozilla

When delegating navigations to the operating system, Firefox would accept the mk scheme which might allow attackers to launch pages and execute scripts in Internet Explorer in unprivileged mode. This bug only affects Firefox for Windows. Other operating systems are unaffected. Mozilla developers...

Security Vulnerabilities fixed in Firefox 92 — Mozilla

Firefox for Android allowed navigations through the intent:// protocol, which could be used to cause crashes and UI spoofs. This bug only affects Firefox for Android. Other operating systems are unaffected. Mixed-content checks were unable to analyze opaque origins which led to some mixed content...

DEBIAN-CVE-2021-30615

Chromium: CVE-2021-30615 Cross-origin data leak in Navigation...

CVE-2021-30615

Chromium: CVE-2021-30615 Cross-origin data leak in Navigation...

Design/Logic Flaw

Chromium: CVE-2021-30615 Cross-origin data leak in Navigation...

CVE-2021-30615

Chromium: CVE-2021-30615 Cross-origin data leak in Navigation...

UBUNTU-CVE-2021-30615

Chromium: CVE-2021-30615 Cross-origin data leak in Navigation...

CVE-2021-30615

Chromium: CVE-2021-30615 Cross-origin data leak in Navigation...

CVE-2021-30615

Chromium: CVE-2021-30615 Cross-origin data leak in Navigation...

CVE-2021-30615

CVE-2021-30615 is a Chromium-based cross-origin data leak in Navigation. Connected documents show affected Chromium packages in Fedora (chromium-93.0.4577.63-1.fcXX) and references to Chromium updates in Astra Linux and Alpine Linux feeds, indicating remediation through updating Chromium to a new...

CVE-2021-30615

Chromium: CVE-2021-30615 Cross-origin data leak in Navigation...

Chromium: CVE-2021-30615 Cross-origin data leak in Navigation

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Spoofable Contents

chromium:edge has spoofable content. Incorrect security UI in Navigation in Google Chrome on Android allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 93 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 93.0.4577.63 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

Hardcoded credentials

Incorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2021-30596

Incorrect security UI in Navigation in Google Chrome on Android prior to 92.0.4515.131 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2021-30596

CVE-2021-30596 is a Chromium-based browser vulnerability affecting Google Chrome/Chromium before version 92.0.4515.131. The issue is an incorrect security UI in the Navigation component that allows a remote attacker to spoof the Omnibox (URL bar) from a crafted HTML page. Public advisories (Arch ...