WordPress Corner Ad Plugin Cross-Site Scripting Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the wordpress Corner Ad plugin, which allows attackers to frame malicious web...

Google Chrome Omnibox Address Forgery Vulnerability (CNVD-2017-02098)

Google Chrome is a popular web browser. An address forgery vulnerability exists in Google Chrome Omnibox, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing and can deceive users...

Google Chrome FFmpeg Heap Overflow Code Execution Vulnerability

Google Chrome is a popular web browser. Google Chrome handles a heap overflow vulnerability in FFmpeg, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by the user, which can crash the application or execute arbitrary code...

Google Chrome Devtools Unauthorized File Access Vulnerability

Google Chrome is a popular web browser. An unauthorized file access vulnerability exists in Google Chrome Devtools, which allows remote attackers to exploit the vulnerability to build malicious web pages that can be parsed by the user and can be used to obtain sensitive information...

Google Chrome V8 Heap Overflow Vulnerability

Google Chrome is a popular web browser. Google Chrome V8 suffers from a heap overflow vulnerability that allows remote attackers to build malicious WEB pages that can be exploited to trick users into parsing them, which can crash applications or execute arbitrary code...

Google Chrome WebRTC Out-of-Bounds Memory Access Vulnerability

Google Chrome is a popular web browser. A memory access vulnerability exists in the Google Chrome WebRTC overrun, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by the user, which can crash the application or execute...

Google Chrome Extensions Memory Misreference Vulnerability (CNVD-2017-02114)

Google Chrome is a popular web browser. A memory misreference vulnerability exists in Google Chrome Extensions, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into being parsed by the user, which can crash the application or execute...

Google Chrome blink ui forgery vulnerability

Google Chrome is a popular web browser. Google Chrome blink suffers from a ui forgery vulnerability that allows remote attackers to build malicious WEB pages that can be exploited to trick users into parsing, which can deceive them...

Google Chrome Omnibox Address Forgery Vulnerability

Google Chrome is a popular web browser. An address forgery vulnerability exists in Google Chrome Omnibox, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing...

Google Chrome metrics type obfuscation code execution vulnerability

Google Chrome is a popular web browser. A type-obfuscated code execution vulnerability in Google Chrome metrics allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by the user, which can crash the application or execute arbitrary code...

Google Chrome Blink Security Policy Bypass Vulnerability

Google Chrome is a popular web browser. A content security policy bypass vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into being parsed by users, which can crash applications or execute...

Google Chrome UI Spoofing Vulnerability

Google Chrome is a popular web browser. A UI spoofing vulnerability exists in Google Chrome, which allows remote attackers to exploit the vulnerability to build malicious WEB pages and trick users into parsing them, which can be used to spoof the UI for spoofing attacks...

Google Chrome chrome://downloads generic cross-site scripting vulnerability

Google Chrome is a popular web browser. A generic cross-site scripting vulnerability in Google Chrome chrome://downloads allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by the user, which can crash the application or execute...

Google Chrome Blink Generic Cross-Site Scripting Vulnerability

Google Chrome is a popular web browser. A generic cross-site scripting vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by a user and can be used to execute arbitrary code...

Google Chrome chrome://apps generic cross-site scripting vulnerability

Google Chrome is a popular web browser. A generic cross-site scripting vulnerability exists in Google Chrome chrome://apps, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be tricked into parsing by users, which can crash the application or execute...

Google Chrome Skia Heap Overflow Code Execution Vulnerability

Google Chrome is a popular web browser. Google Chrome Skia suffers from a heap overflow code execution vulnerability that allows remote attackers to build malicious web pages that can be exploited to trick users into parsing them, which can crash the application or execute arbitrary code...

Google Chrome Blink Generic Cross-Site Scripting Vulnerability (CNVD-2017-02111)

Google Chrome is a popular web browser. A generic cross-site scripting vulnerability exists in Google Chrome Blink, which allows remote attackers to exploit the vulnerability to build malicious WEB pages that can be parsed by a user and can be used to execute arbitrary code...

CVE-2017-5016

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page...

UBUNTU-CVE-2017-5016

Blink in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, failed to prevent certain UI elements from being displayed by non-visible pages, which allowed a remote attacker to show certain UI elements on a page they don't control via a crafted HTML page...

Suspicious Malvertising Redirection

Campaigns of malvertising, redirecting to malicious web pages, have been identified. Successful exploitation could result in remote code execution on the target system once the malicious page is loaded...