PT-2021-6783

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 100.0.4896.88 Description The issue is related to type confusion in the V8 JavaScript engine of Google Chrome, which can lead to heap corruption. A remote attacker could potentially exploit this issue by using a...

PT-2021-5596

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.45 Description The issue is related to a type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a crafted HTML page,...

PT-2021-4862

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.45 Description The issue is related to a type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a crafted HTML page,...

Google Releases Urgent Chrome Update to Patch 2 Actively Exploited 0-Day Bugs

Google on Thursday rolled out an emergency update for its Chrome web browser, including fixes for two zero-day vulnerabilities that it says are being actively exploited in the wild. Tracked as CVE-2021-38000 and CVE-2021-38003, the weaknesses relate to insufficient validation of untrusted input i...

PT-2021-5626

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 95.0.4638.54 Description The issue is related to a use after free in the V8 JavaScript engine, which can lead to heap corruption. This can be exploited by a remote attacker who has convinced a user to allow a...

Google Chrome Resource Management Error Vulnerability

Chrome is a web browsing tool developed by Google. a post-release reuse vulnerability exists in V8 in versions prior to Google Chrome 95.0.4638.54. An attacker could exploit the vulnerability to exploit heap corruption via a crafted HTML page...

PT-2021-4786

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 95.0.4638.69 Description The issue is related to type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker could potentially exploit this by using a specially crafted HTML...

Update Google Chrome ASAP to Patch 2 New Actively Exploited Zero-Day Flaws

Google on Thursday pushed urgent security fixes for its Chrome browser, including a pair of new security weaknesses that the company said are being exploited in the wild, making them the fourth and fifth actively zero-days plugged this month alone. The issues, designated as CVE-2021-37975 and...

Google Emergency Update Fixes Two Chrome Zero Days

Google has pushed out an emergency Chrome update to fix yet another pair of zero days – the second pair this month – that are being exploited in the wild. This hoists this year’s total number of zero days found in the browser up to a dozen. “Google is aware the exploits for CVE-2021-37975 and...

Edge’s Super Duper Secure Mode benchmarked: How much speed would you trade for security?

In an attempt to make Edge more secure, the Microsoft Vulnerability Research team has started to experiment with disabling Just-In-Time JIT compilation in the browsers V8 JavaScript engine, to create what its calling Super Duper Secure Mode. The reasoning behind this experiment sounds valid. A...

PT-2021-3873

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.159 Description The issue is related to a type confusion in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker to execute arbitrary code inside a sandbox. This can b...

PT-2021-3678

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107 Description The issue is related to a type confusion in the V8 JavaScript engine of Google Chrome, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a...

PT-2021-3703

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 91.0.4472.164 Description The issue is related to a use after free in the V8 JavaScript engine of Google Chrome, which can lead to heap corruption. A remote attacker could potentially exploit this issue by using...

PT-2021-3764

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 91.0.4472.164 Description The issue is related to a Type Confusion in the V8 JavaScript engine, which can potentially allow a remote attacker to exploit heap corruption via a crafted HTML page. This vulnerabilit...

[SECURITY] [DSA 4917-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4917-1 [email protected] https://www.debian.org/security/ Michael Gilbert May 17, 2021 https://www.debian.org/security/faq -...

Debian DSA-4917-1 : chromium - security update

Several vulnerabilities have been discovered in the chromium web browser. - CVE-2021-30506 @retsew0x01 discovered an error in the Web App installation interface. - CVE-2021-30507 Alison Huffman discovered an error in the Offline mode. - CVE-2021-30508 Leecraso and Guang Gong discovered a buffer...

PT-2021-4549

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.212 Description The issue is related to type confusion in the V8 JavaScript engine, which can be exploited by a remote attacker to potentially access confidential data, compromise data integrity, and...

PT-2021-4519

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.212 Description The issue is related to type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can exploit this by using a specially crafted HTML page,...

Update Your Chrome Browser to Patch 2 New In-the-Wild 0-Day Exploits

Google on Tuesday released a new version of Chrome web-browsing software for Windows, Mac, and Linux with patches for two newly discovered security vulnerabilities for both of which it says exploits exist in the wild, allowing attackers to engage in active exploitation. One of the two flaws...

PT-2021-2804

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.93 Microsoft Edge affected versions not specified Description The issue is related to a type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can potentially...