3714 matches found
CVE-2020-16022
Chromium/Chromium-derived Chrome vulnerability CVE-2020-16022 is an insufficient policy enforcement issue in the networking component that could let an attacker bypass firewall controls via a crafted HTML page. Affected software: Chromium browser (networking policy enforcement). Root cause: insuf...
CVE-2020-16022
Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially bypass firewall controls via a crafted HTML page...
CVE-2020-16022
Insufficient policy enforcement in networking in Google Chrome prior to 87.0.4280.66 allowed a remote attacker to potentially bypass firewall controls via a crafted HTML page...
CVE-2020-16027
Insufficient policy enforcement in developer tools in Google Chrome prior to 87.0.4280.66 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from the user’s disk via a crafted Chrome Extension. Recent assessments: Assessed Attacke...
Google Chrome Insufficient Policy Enforcement Vulnerability (CNVD-2021-04416)
Google Chrome is a web browser from Google, an American company. A policy enforcement deficiency vulnerability exists in the WebUI in versions prior to Google Chrome 87.0.4280.141. An attacker can exploit the vulnerability to perform sandbox escaping via a specially crafted Chrome extension...
Stable Channel Update for Desktop
The Stable channel has been updated to 87.0.4280.141 for Windows, Mac and Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by...
CVE-2020-17533
Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain administrative operations. Specifically, the return values of the 'canFlush' and...
CVE-2020-17533
Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain administrative operations. Specifically, the return values of the 'canFlush' and...
Code injection
Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain administrative operations. Specifically, the return values of the 'canFlush' and...
CVE-2020-17533 Apache Accumulo Improper Handling of Insufficient Permissions
Apache Accumulo versions 1.5.0 through 1.10.0 and version 2.0.0 do not properly check the return value of some policy enforcement functions before permitting an authenticated user to perform certain administrative operations. Specifically, the return values of the 'canFlush' and...
CVE-2020-17533
Summary of CVE-2020-17533 (Apache Accumulo) Root cause: Insufficient verification of the return values from policy-enforcement functions canFlush and canPerformSystemActions, allowing an authenticated user with limited permissions to perform restricted administrative operations. Affected versions...
Privilege Escalation
chromium is vulnerable to privilege escalation. Insufficient policy enforcement in the Intents allows a local attacker to bypass navigation restrictions via malicious Intents...
Arbitrary Code Execution
chromium is vulnerable to arbitrary code execution. Insufficient policy enforcement in downloads allows a remote attacker, who has tricked a user open files, to execute arbitrary code via a malicious HTML page...
Information Disclosure
chromium, sid is vulnerable to insufficient policy enforcement in extensions in Google Chrome. It allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information via a crafted Chrome Extension...
Insufficient Policy Enforcement
Insufficient policy enforcement in intent handling in Google Chrome on Android allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page...
Cross-origin Data Leak
chromium is vulnerable to cross-origin data leak. Insufficient policy enforcement in media in Google Chrome allowed a remote attacker to leak cross-origin data via a crafted HTML page...
Authorization Bypass
chromium is vulnerable to authorization bypass. The vulnerability exists through insufficient policy enforcement in intent handling that allows a remote attacker to bypass navigation restrictions via a crafted HTML page...
Information Disclosure
chromium is vulnerable to information disclosure. Insufficient policy enforcement in autofill allows a remote attacker to leak cross-origin data via a malicious HTML page...
Content-Security Policy Bypass
chromium is vulnerable to content-security policy bypass. Insufficient policy enforcement in CSP allows a remote attacker to bypass content security policy via a malicious HTML page...