CVE-2021-44749

F-Secure SAFE Browser Protection for Android is reported vulnerable to universal cross-site scripting due to improper URL handling in the SAFE browser protection module. The vulnerability could allow arbitrary code execution; user interaction is required for exploitation. Connected sources refere...

Google Chrome Media Memory Misreference Vulnerability (CNVD-2022-63926)

Google Chrome is a web browser from Google, Inc. Google Chrome Media is vulnerable to a memory misreference vulnerability that results from a mix-up in the program's instructions for freeing memory, which could be exploited to execute arbitrary code on the system or cause a denial of service...

Google Chrome Read Out-of-Bounds Vulnerability

Google Chrome is a web browser from Google, Inc. Google Chrome suffers from a read out-of-bounds vulnerability, which stems from a read out-of-bounds issue in ANGLE and can be exploited by attackers to potentially execute arbitrary code...

Google Chrome Information Disclosure Vulnerability (CNVD-2022-45558)

Google Chrome is a web browser from Google, Inc. Google Chrome is vulnerable to an information disclosure vulnerability that could be exploited to disclose cross-domain data via crafted HTML pages...

Google Chrome OS Shell Memory Misreference Vulnerability

Google Chrome is a web browser from Google, Inc. A memory mis-reference vulnerability exists in Google Chrome OS Shell, which can be exploited by attackers to execute arbitrary code on the system or cause a denial of service condition...

Google Chrome Cast UI memory error reference vulnerability

Google Chrome is a web browser from Google, Inc. A memory mis-reference vulnerability exists in the Google Chrome Cast UI, which is caused by a mix-up in the program's instructions for freeing memory, and can be exploited to cause the program to crash and execute arbitrary code...

Google Chrome Cast UI Heap Buffer Overflow Vulnerability

Google Chrome is a web browser from Google, Inc. A heap buffer overflow vulnerability exists in the Google Chrome Cast UI, which can be exploited by attackers to cause arbitrary code execution...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-20558)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a resource management error vulnerability that stems from a release and reuse technique within the file manager component. A remote attacker could exploit this vulnerability to create a specially crafted w...

Google Chrome ANGLE code execution vulnerability (CNVD-2022-20555)

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome ANGLE, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service condition...

Google Chrome GPU Code Execution Vulnerability (CNVD-2022-20554)

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome GPU, which can be exploited by an attacker to execute arbitrary code on a system or cause a denial of service condition...

[SECURITY] Fedora 34 Update: firefox-97.0-1.fc34

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

USN-5284-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass security restrictions, obtain sensitive information, or execute arbitrary code. CVE-2022-0511,...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ALSA-2022:0510 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.6.0 ESR. Security Fixes: Mozilla: Extensions could have bypassed permission confirmation during update CVE-2022-22754 Mozilla: Memory safety...

[SECURITY] Fedora 35 Update: firefox-97.0-1.fc35

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-44715)

Google Chrome is a web browser from Google, Inc. that is vulnerable to a resource management error. A remote attacker could use this vulnerability to convince a user to engage in a specific user interaction, which could potentially exploit heap corruption via user interaction...

Google Chrome Type Obfuscation Vulnerability (CNVD-2022-45565)

Google Chrome is a web browser from Google, Inc. A type obfuscation vulnerability exists in Google Chrome, which can be exploited by remote attackers to potentially exploit heap corruption via well-designed HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-44719)

Google Chrome is a web browser from Google, Inc. that is vulnerable to a resource management error. A remote attacker who has compromised the renderer process can exploit this vulnerability to potentially exploit heap corruption via a carefully crafted HTML page...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-45570)

Google Chrome is a web browser from Google, Inc. A security feature vulnerability exists in versions of Google Chrome prior to 98.0.4758.80, which can be exploited by remote attackers to compromise cross-domain data via crafted HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-45571)

Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in versions of Google Chrome prior to 98.0.4758.80, which could be exploited by remote attackers to convince users to engage in certain user interactions that could potentially exploit heap corruptio...