Google Chrome 缓冲区错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A heap buffer overflow vulnerability exists in V8 in versions prior to Google Chrome 88.0.4324.182, which can be exploited by an attacker via a crafted script to...

PT-2021-2014

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 88.0.4324.182 Description The issue is caused by a heap buffer overflow in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker to potentially execute arbitrary code via a craft...

MGASA-2021-0083 Updated chromium-browser packages fix security vulnerability

The updated packages fix security vulnerabilities. One of those problems is a security issue in V8 engine that is actively exploited...

Updated chromium-browser packages fix security vulnerability

The updated packages fix security vulnerabilities. One of those problems is a security issue in V8 engine that is actively exploited...

PT-2021-30837

Name of the Vulnerable Software and Affected Versions V8 engine affected versions not specified Description A security issue in the V8 engine is being actively exploited. Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability...

ALPINE-CVE-2021-21148

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Google Chrome Zero-Day Afflicts Windows, Mac Users

Google is warning of a zero-day vulnerability in its V8 open-source web engine that’s being actively exploited by attackers. A patch has been issued in version 88 of Google’s Chrome browser — specifically, version 88.0.4324.150 for Windows, Mac and Linux. This update will roll out over the coming...

New Chrome Browser 0-day Under Active Attack—Update Immediately!

Google has patched a zero-day vulnerability in Chrome web browser for desktop that it says is being actively exploited in the wild. The company released 88.0.4324.150 for Windows, Mac, and Linux, with a fix for a heap buffer overflow flaw CVE-2021-21148 in its V8 JavaScript rendering engine...

DEBIAN-CVE-2020-16042

Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

chromium-browser: Uninitialized Use in V8

The Mozilla Foundation Security Advisory describes this flaw as: When a BigInt was right-shifted the backing store was not properly cleared, allowing uninitialized memory to be read...

UBUNTU-CVE-2020-16042

Uninitialized Use in V8 in Google Chrome prior to 87.0.4280.88 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

V8 Engine Compromise Data Compromise

The vulnerability of the V8 engine implementation in Google Chrome browsers is related to writing beyond the buffer boundaries of memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

chromium-browser: Inappropriate implementation in V8

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

New Chrome Zero-Day Under Active Attacks – Update Your Browser

Google has patched a second actively exploited zero-day flaw in the Chrome browser in two weeks, along with addressing nine other security vulnerabilities in its latest update. The company released 86.0.4240.183 for Windows, Mac, and Linux, which it said will be rolling out over the coming...

DEBIAN-CVE-2020-16009

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

PT-2020-4557

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 86.0.4240.183 Description The issue is related to an inappropriate implementation in the V8 engine of Google Chrome, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a...

PT-2020-4560

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 86.0.4240.183 Description The issue is related to an inappropriate implementation in the V8 engine of Google Chrome, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a...

CVE-2020-6537

Type confusion in V8 in Google Chrome prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...

Google Chrome V8 Engine Data Compromise

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service failures through a specially...

Google Chrome V8 Engine Data Compromise

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...