PT-2021-4549

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.212 Description The issue is related to type confusion in the V8 JavaScript engine, which can be exploited by a remote attacker to potentially access confidential data, compromise data integrity, and...

PT-2021-4519

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.212 Description The issue is related to type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can exploit this by using a specially crafted HTML page,...

PT-2021-2804

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.93 Microsoft Edge affected versions not specified Description The issue is related to a type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can potentially...

PT-2021-4554

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 91.0.4472.77 Description The issue is related to an out of bounds read in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker using a crafted HTML page. This could potentially...

Node.js: Unexpected input validation of octal literals in nodejs v15.12.0 and below returns defined values for all undefined octal literals.

Summary: Unexpected input validation of octal literals in the nodejs implementation of V8 JavaScript engine V8 9.0.257.13 and below returns defined values for all undefined octal literals where otherwise should return undefined. Input data 08, 09... 078, 079 should return undefined, as evinced by...

PT-2021-2805

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.85 Microsoft Edge affected versions not specified Description The issue is related to a heap buffer overflow in the V8 JavaScript engine handler, which can be exploited by a remote attacker to execute...

Google Chrome Zero-Day Afflicts Windows, Mac Users

Google is warning of a zero-day vulnerability in its V8 open-source web engine that’s being actively exploited by attackers. A patch has been issued in version 88 of Google’s Chrome browser — specifically, version 88.0.4324.150 for Windows, Mac and Linux. This update will roll out over the coming...

PT-2021-2066

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 88.0.4324.150 Description: A heap buffer overflow in the V8 JavaScript engine allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue was actively exploited in the...

Firefox Patches Critical Mystery Bug, Also Impacting Google Chrome

A Mozilla Foundation update to the Firefox web browser, released Tuesday, tackles one critical vulnerability and a handful of high-severity bugs. The update, released as Firefox version 84, is also billed by Mozilla as boosting the browser’s performance and adding native support for macOS hardwar...

Foxit Reader JavaScript media openPlayer type confusion vulnerability

Summary A type confusion vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger an improper use of an object, resulting in memory corruption and arbitrary code execution. An attacker needs to trick the...

Foxit Reader JavaScript choice field use-after-free vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

PT-2020-5575

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.88 Description The issue is related to an uninitialized use in the V8 JavaScript engine of Google Chrome, which can allow a remote attacker to obtain potentially sensitive information from process...

PT-2020-5734

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 87.0.4280.88 Description: The issue is related to insufficient data validation in the V8 JavaScript engine of Google Chrome, which can lead to heap corruption. A remote attacker can potentially exploit this by...

New Chrome Zero-Day Under Active Attacks – Update Your Browser

Google has patched a second actively exploited zero-day flaw in the Chrome browser in two weeks, along with addressing nine other security vulnerabilities in its latest update. The company released 86.0.4240.183 for Windows, Mac, and Linux, which it said will be rolling out over the coming...

PT-2020-6198

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 86.0.4240.99 Description The issue is related to an out of bounds write in the V8 JavaScript engine of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This...

PT-2020-5686

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 85.0.4183.121 Description The issue is related to a type confusion in the V8 JavaScript engine, which could allow a remote attacker to potentially perform out of bounds memory access. This could be achieved via ...

PT-2020-5697

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to...

PT-2020-5674

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to...

PT-2020-5792

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 83.0.4103.106 Description: The issue is related to an out of bounds write in the V8 JavaScript engine of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. Th...

PT-2020-3429

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61 Description The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could enable the...