PT-2021-2805

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.85 Microsoft Edge affected versions not specified Description The issue is related to a heap buffer overflow in the V8 JavaScript engine handler, which can be exploited by a remote attacker to execute...

Google Chrome Zero-Day Afflicts Windows, Mac Users

Google is warning of a zero-day vulnerability in its V8 open-source web engine that’s being actively exploited by attackers. A patch has been issued in version 88 of Google’s Chrome browser — specifically, version 88.0.4324.150 for Windows, Mac and Linux. This update will roll out over the coming...

PT-2021-2066

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 88.0.4324.150 Description: A heap buffer overflow in the V8 JavaScript engine allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue was actively exploited in the...

Firefox Patches Critical Mystery Bug, Also Impacting Google Chrome

A Mozilla Foundation update to the Firefox web browser, released Tuesday, tackles one critical vulnerability and a handful of high-severity bugs. The update, released as Firefox version 84, is also billed by Mozilla as boosting the browser’s performance and adding native support for macOS hardwar...

Foxit Reader JavaScript media openPlayer type confusion vulnerability

Summary A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the...

Foxit Reader JavaScript choice field use-after-free vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

PT-2020-5575

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.88 Description The issue is related to an uninitialized use in the V8 JavaScript engine of Google Chrome, which can allow a remote attacker to obtain potentially sensitive information from process...

PT-2020-5734

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 87.0.4280.88 Description: The issue is related to insufficient data validation in the V8 JavaScript engine of Google Chrome, which can lead to heap corruption. A remote attacker can potentially exploit this by...

New Chrome Zero-Day Under Active Attacks – Update Your Browser

Google has patched a second actively exploited zero-day flaw in the Chrome browser in two weeks, along with addressing nine other security vulnerabilities in its latest update. The company released 86.0.4240.183 for Windows, Mac, and Linux, which it said will be rolling out over the coming...

PT-2020-6198

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 86.0.4240.99 Description The issue is related to an out of bounds write in the V8 JavaScript engine of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This...

PT-2020-5686

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 85.0.4183.121 Description The issue is related to a type confusion in the V8 JavaScript engine, which could allow a remote attacker to potentially perform out of bounds memory access. This could be achieved via ...

PT-2020-5674

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to...

PT-2020-5697

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to...

PT-2020-5792

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 83.0.4103.106 Description: The issue is related to an out of bounds write in the V8 JavaScript engine of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. Th...

PT-2020-3429

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61 Description The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could enable the...

PT-2020-6449

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 80.0.3987.162 Description The issue is caused by a buffer overflow in the dynamic memory of the V8 JavaScript engine handler in Google Chrome. This could allow a remote attacker to exploit heap corruption via a...

Foxit PhantomPDF 8.x < 8.3.12 / 9.x < 9.7 Multiple Vulnerabilities

According to its version, the Foxit PhantomPDF application formally known as Phantom installed on the remote Windows host is prior to 8.x 8.3.12 / 9.x 9.7. It is, therefore affected by multiple vulnerabilities: - An out-of-bounds error exists in the V8 JavaScript engine. An unauthenticated, remot...

CVE-2019-13123

Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine issue 1 of 2...

Design/Logic Flaw

Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine issue 1 of 2...

CVE-2019-13124

Foxit Reader 9.6.0.25114 and earlier has two unique RecursiveCall bugs involving 3 functions exhausting available stack memory because of Uncontrolled Recursion in the V8 JavaScript engine issue 2 of 2...