Lucene search
+L

321 matches found

CNVD
CNVD
added 2021/08/03 12:00 a.m.56 views

Google Chrome Post-release Reuse Vulnerability (CNVD-2021-62188)

Chrome is a web browsing tool developed by Google, and a post-release reuse vulnerability exists in the File System API in versions prior to Google Chrome 92.0.4515.131. An attacker could use this vulnerability to execute arbitrary code or cause a denial of service condition on the system...

8.8CVSS5.9AI score0.02524EPSS
SaveExploits1References1
FreeBSD
FreeBSD
added 2021/08/02 12:00 a.m.42 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 10 security fixes, including: 1227777 High CVE-2021-30590: Heap buffer overflow in Bookmarks. Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2021-07-09 1229298 High CVE-2021-30591: Use after free in File System API. Reported by SorryMybad...

8.8CVSS0.0282EPSS
SaveExploits7References1
OSV
OSV
added 2021/07/05 8:13 p.m.9 views

OPENSUSE-SU-2021:0973-1 Security update for libqt5-qtwebengine

This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.3 CVE fixes backported in chromium updates: - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21118: Heap buffer overflow in Blink - CVE-2021-21119: Use after free in Media - CVE-2021-21120: Use after free i...

9.6CVSS7.8AI score0.23406EPSS
SaveExploits8References35
Positive Technologies
Positive Technologies
added 2021/05/12 12:00 a.m.15 views

PT-2021-8115 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 106.0.5249.62 Description: The issue is related to insufficient data validation in the File System API, allowing a remote attacker to bypass File System restrictions. This can be achieved via a crafted HTML pag...

9.6CVSS7.8AI score0.70461EPSS
SaveExploits21References448
Tenable Nessus
Tenable Nessus
added 2021/04/07 12:00 a.m.63 views

Debian DSA-4886-1 : chromium - security update

Several vulnerabilites have been discovered in the chromium web browser. - CVE-2021-21159 Khalil Zhani discovered a buffer overflow issue in the tab implementation. - CVE-2021-21160 Marcin Noga discovered a buffer overflow issue in WebAudio. - CVE-2021-21161 Khalil Zhani discovered a buffer...

8.8CVSS7.9AI score0.23847EPSS
SaveExploits26References83
NVD
NVD
added 2021/03/09 6:15 p.m.20 views

CVE-2021-21172

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...

8.1CVSS0.0165EPSS
SaveExploits1References7
OSV
OSV
added 2021/03/09 6:15 p.m.2 views

DEBIAN-CVE-2021-21172

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...

8.1CVSS8AI score0.0165EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2021/03/09 6:15 p.m.32 views

CVE-2021-21172

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...

8.1CVSS7.2AI score0.0165EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/03/09 6:15 p.m.5 views

CVE-2021-21172

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...

8.1CVSS6.9AI score0.0165EPSS
SaveExploits1References11
Cvelist
Cvelist
added 2021/03/09 5:46 p.m.35 views

CVE-2021-21172

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...

7.8AI score0.0165EPSS
SaveExploits1References7
Debian CVE
Debian CVE
added 2021/03/09 5:46 p.m.39 views

CVE-2021-21172

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...

8.1CVSS8.2AI score0.0165EPSS
SaveExploits1
CVE
CVE
added 2021/03/09 5:46 p.m.238 views

CVE-2021-21172

CVE-2021-21172 corresponds to a policy enforcement error in Chrome's File System API on Windows, allowing a remote attacker to bypass filesystem restrictions via a crafted HTML page. Affected: Google Chrome/Chromium prior to 89.0.4389.72 (File System API component). Root cause: insufficient polic...

8.1CVSS7.4AI score0.0165EPSS
SaveExploits1References7Affected Software1
AlpineLinux
AlpineLinux
added 2021/03/09 5:46 p.m.102 views

CVE-2021-21172

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...

8.1CVSS7.7AI score0.0165EPSS
SaveExploits1
Veracode
Veracode
added 2021/03/09 2:26 p.m.25 views

Bypass Filesystem Restrictions

chromium:sid is vulnerable to bypass filesystem restrictions. Insufficient policy enforcement in File System API in Google Chrome on Windows allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...

8.1CVSS3.1AI score0.0165EPSS
SaveExploits1References11Affected Software2
Microsoft CVE
Microsoft CVE
added 2021/03/05 4:04 a.m.36 views

Chromium CVE-2021-21172: Insufficient policy enforcement in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.1CVSS8.1AI score0.0165EPSS
SaveExploits1
Kaspersky
Kaspersky
added 2021/03/04 12:00 a.m.51 views

KLA12107 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An...

8.8CVSS9.6AI score0.23847EPSS
SaveExploits24References36
CNVD
CNVD
added 2021/03/03 12:00 a.m.14 views

Google Chrome Insufficient Policy Enforcement Vulnerability (CNVD-2021-17295)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An insufficient policy enforcement vulnerability exists in the file system API in versions of Google Chrome prior to 89.0.4389.72. A remote attacker can exploit thi...

8.1CVSS6AI score0.0165EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2021/03/03 12:00 a.m.11 views

Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An insufficient policy enforcement vulnerability exists in the file system API in versions of Google Chrome prior to 89.0.4389.72. A remote attacker can exploit thi...

8.1CVSS8.3AI score0.0165EPSS
SaveExploits1References11
Kaspersky
Kaspersky
added 2021/03/02 12:00 a.m.503 views

KLA12106 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A heap buff...

8.8CVSS9.3AI score0.23847EPSS
SaveExploits25References4
BDU FSTEC
BDU FSTEC
added 2021/02/23 12:00 a.m.12 views

The vulnerability of the File System API interface in the Google Chrome web browser allows a hacker to circumvent existing security restrictions.

The vulnerability of the File System API interface in the Google Chrome web browser is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions remotely...

4.3CVSS7AI score0.09966EPSS
SaveExploits0References12Affected Software7
Rows per page
Query Builder