SUSE CVE-2021-38019

Insufficient policy enforcement in CORS in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

SUSE CVE-2022-1873

Insufficient policy enforcement in COOP in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

SUSE CVE-2022-3054

Insufficient policy enforcement in DevTools in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Weak policy at Change password function

Description We can register an normal account with = 8 characters password. But we ccan change password with just 1 character when we use change password function Proof of Concept https://drive.google.com/file/d/1D-IDqrMiaBGLnZaZY9L3u-S4u-MoGxPc/view?usp=sharing...

AZL-6508 CVE-2021-44225 affecting package keepalived for versions less than 2.2.7-1

In Keepalived through 2.2.4, the D-Bus policy does not sufficiently restrict the message destination, allowing any user to inspect and manipulate any property. This leads to access-control bypass in some situations in which an unrelated D-Bus system service has a settable writable property...

The vulnerability of the Synergia operating system, related to weaknesses in password policies, allows attackers to obtain user passwords by force.

The vulnerability of the Synergia operating system is related to weaknesses in the password policy. Exploiting this vulnerability could allow a perpetrator to obtain user passwords by force...

The vulnerability of Google Chrome’s navigation mechanism, related to improper authorization, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome’s navigation function is related to the insufficient implementation of security policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

The vulnerability of the Google Chrome browser’s Payment function, related to deficiencies in authentication procedures, allows attackers to compromise data integrity.

The vulnerability of the Google Chrome browser’s Payment function is related to the insufficient implementation of security policies. Exploiting this vulnerability could allow a malicious actor to compromise data integrity remotely...

The vulnerability of Google Chrome browser extensions, related to improper authorization, allows a perpetrator to compromise data integrity.

The vulnerability of Google Chrome browsers is related to the insufficient implementation of policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity remotely...

The vulnerability of Google Chrome’s networking component allows attackers to gain access to confidential data.

The vulnerability of the networking component of Google Chrome is related to insufficient implementation of policies. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data...

chromium-browser: Insufficient policy enforcement in enterprise

Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions...

PT-2020-4258 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome on iOS versions prior to 83.0.4103.88 Description: The issue is related to insufficient policy enforcement in the Omnibox component of Google Chrome on iOS, allowing a remote attacker to perform domain spoofing via a crafted URI...

chromium-browser: Insufficient policy enforcement in AppCache

Insufficient policy enforcement in AppCache in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

chromium-browser: Script injection in New Tab Page

Insufficient policy enforcement in extensions API in Google Chrome prior to 69.0.3497.81 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extension...