Lucene search
+L

142 matches found

UbuntuCve
UbuntuCve
•added 2021/12/23 1:15 a.m.•32 views

CVE-2021-38022

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7AI score0.00856EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2021/12/23 12:05 a.m.•36 views

CVE-2021-38022

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.9AI score0.00856EPSS
SaveExploits0References4
CVE
CVE
•added 2021/12/23 12:05 a.m.•163 views

CVE-2021-38022

CVE-2021-38022 affects Google Chrome’s WebAuthentication component in the Chromium engine, with an inappropriate implementation before 96.0.4664.45 that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is described in multiple security entries and advisor...

6.5CVSS6.4AI score0.00856EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/23 12:00 a.m.•4 views

CVE-2021-38022: Undefined Security Weakness

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.5AI score0.00856EPSS
SaveExploits0References1
Veracode
Veracode
•added 2021/12/12 12:00 p.m.•29 views

Insecure Implementation In WebAuthentication

qt5-qtwebengine has inappropriate implementation in WebAuthentication...

6.5CVSS3AI score0.00856EPSS
SaveExploits0References8Affected Software3
Microsoft CVE
Microsoft CVE
•added 2021/11/19 8:00 a.m.•37 views

Chromium: CVE-2021-38022 Inappropriate implementation in WebAuthentication

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.6AI score0.00856EPSS
SaveExploits0
CNVD
CNVD
•added 2021/11/16 12:00 a.m.•61 views

Google Chrome WebAuthentication Misimplementation Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google. A WebAuthentication mal-implementation vulnerability exists in versions of Google Chrome prior to 96.0.4664.45. An attacker could exploit this vulnerability to leak cross-origin data via a crafted HTML page...

6.5CVSS6.8AI score0.00856EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/11/15 12:00 a.m.•18 views

Google Chrome 安全特征问题漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google. A WebAuthentication mal-implementation vulnerability exists in versions of Google Chrome prior to 96.0.4664.45. An attacker could exploit this vulnerability to leak cross-origin data via a crafted HTML page...

6.5CVSS8.2AI score0.00856EPSS
SaveExploits0References12
FreeBSD
FreeBSD
•added 2021/11/15 12:00 a.m.•144 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 25 security fixes, including: 1263620 High CVE-2021-38008: Use after free in media. Reported by Marcin Towalski of Cisco Talos on 2021-10-26 1260649 High CVE-2021-38009: Inappropriate implementation in cache. Reported by Luan Herrera @lbherrera on...

9.6CVSS8.3AI score0.01362EPSS
SaveExploits2References1
Positive Technologies
Positive Technologies
•added 2021/11/15 12:00 a.m.•3 views

PT-2021-5703

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.45 Description The issue is related to an inappropriate implementation in the WebAuthentication mechanism of Google Chrome, which can allow a remote attacker to leak cross-origin data. This can be...

6.5CVSS0.00856EPSS
SaveExploits0
OSV
OSV
•added 2021/06/07 8:15 p.m.•16 views

CVE-2021-30528

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS6.7AI score
SaveExploits0References6
NVD
NVD
•added 2021/06/07 8:15 p.m.•28 views

CVE-2021-30528

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.01346EPSS
SaveExploits1References6
Prion
Prion
•added 2021/06/07 8:15 p.m.•33 views

Design/Logic Flaw

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.7AI score0.01346EPSS
SaveExploits1References6Affected Software2
UbuntuCve
UbuntuCve
•added 2021/06/07 8:15 p.m.•34 views

CVE-2021-30528

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.01346EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2021/06/07 8:15 p.m.•11 views

CVE-2021-30528

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.01346EPSS
SaveExploits1References9
CVE
CVE
•added 2021/06/07 12:00 a.m.•244 views

CVE-2021-30528

CVE-2021-30528 is a use-after-free vulnerability in the Chromium WebAuthentication component (Chromium/Google Chrome) on Android, before version 91.0.4472.77. The issue can allow a remote attacker who has compromised the renderer process of a user who saved a credit card in their Google account t...

8.8CVSS8.7AI score0.01346EPSS
SaveExploits1References6Affected Software1
AlpineLinux
AlpineLinux
•added 2021/06/07 12:00 a.m.•100 views

CVE-2021-30528

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.01346EPSS
SaveExploits1
Mend
Mend
•added 2021/06/07 12:00 a.m.•2 views

CVE-2021-30528

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.01346EPSS
SaveExploits1References11
Debian CVE
Debian CVE
•added 2021/06/07 12:00 a.m.•62 views

CVE-2021-30528

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.01346EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/07 12:00 a.m.•4 views

CVE-2021-30528: Use After Free

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.01346EPSS
SaveExploits1References2
Rows per page
Query Builder