Microsoft Edge (Chromium) < 79.0.309.68 Multiple Vulnerabilities

The version of Microsoft Edge Chromium installed on the remote Windows host is prior to 79.0.309.68. It is, therefore, affected by multiple vulnerabilities: - A spoofing vulnerability exists in the Windows CryptAPI due to how it validates Elliptic Curve Cryptography ECC certificates. An...

chromium-browser: Use after free in speech

Use after free in speech in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

KLA11817 Multiple vulnerability in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Insufficient policy enforcement vulnerability in WebViewcan be exploited to bypass...

PT-2020-5791

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 83.0.4103.106 Description: The issue is related to a use after free in the speech component, which could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This could enabl...

CVE-2020-6386

Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

PT-2019-4859

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 79.0.3945.130 Description The issue is related to the use of memory after it has been freed in the speech component of Google Chrome, potentially allowing a remote attacker to exploit heap corruption via a craft...

CVE-2018-4184

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Speech" component. It allows attackers to bypass a sandbox protection mechanism to obtain microphone access...

CVE-2018-4184

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Speech" component. It allows attackers to bypass a sandbox protection mechanism to obtain microphone access...

Apple macOS High Sierra Access Control Vulnerability

Apple macOS High Sierra is a dedicated operating system developed by Apple for Mac computers.Speech is one of the speech recognition components. A security vulnerability exists in the handling of microphone access in the Speech component in Apple macOS High Sierra versions prior to 10.13.5. An...

UBUNTU-CVE-2014-7935

Use-after-free vulnerability in browser/speech/ttsmessagefilter.cc in the Speech implementation in Google Chrome before 40.0.2214.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving utterances from a closed tab...