Lucene search
K

10953 matches found

OSV
OSV
added 2020/09/21 8:15 p.m.0 views

UBUNTU-CVE-2020-6538

Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS5.8AI score0.01015EPSS
Exploits0References2
CVE
CVE
added 2020/09/21 7:6 p.m.193 views

CVE-2020-6538

CVE-2020-6538 affects Google Chrome WebView on Android (inappropriate WebView implementation) allowing cross-origin data leakage via a crafted HTML page. Connected sources indicate the issue was fixed in Chrome/Chromium releases around 84.0.4147.105; Debian’s advisory lists CVE-2020-6538 among up...

6.5CVSS6.1AI score0.01015EPSS
Exploits0References4Affected Software1
Debian CVE
Debian CVE
added 2020/09/21 7:6 p.m.24 views

CVE-2020-6538

Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.1AI score0.01015EPSS
Exploits0
NVD
NVD
added 2020/09/11 5:15 p.m.12 views

CVE-2020-16873

A spoofing vulnerability manifests in Microsoft Xamarin.Forms due to the default settings on Android WebView version prior to 83.0.4103.106. This vulnerability could allow an attacker to execute arbitrary Javascript code on a target system. For the attack to be successful, the targeted user would...

8.8CVSS0.04006EPSS
Exploits0References1
Prion
Prion
added 2020/09/11 5:15 p.m.11 views

Spoofing

A spoofing vulnerability manifests in Microsoft Xamarin.Forms due to the default settings on Android WebView version prior to 83.0.4103.106. This vulnerability could allow an attacker to execute arbitrary Javascript code on a target system. For the attack to be successful, the targeted user would...

6.8CVSS5.2AI score0.04006EPSS
Exploits0References1
CVE
CVE
added 2020/09/11 5:8 p.m.73 views

CVE-2020-16873

The CVE-2020-16873 entry describes a spoofing vulnerability in Microsoft Xamarin.Forms tied to the Android WebView default settings before 83.0.4103.106. The issue allows an attacker to execute arbitrary Javascript if a user visits a malicious website or a site serving malicious code via Xamarin....

8.8CVSS6.7AI score0.04006EPSS
Exploits0References1Affected Software1
Microsoft CVE
Microsoft CVE
added 2020/09/08 7:0 a.m.40 views

Xamarin.Forms Spoofing Vulnerability

A spoofing vulnerability manifests in Microsoft Xamarin.Forms due to the default settings on Android WebView version prior to 83.0.4103.106. This vulnerability could allow an attacker to execute arbitrary Javascript code on a target system. For the attack to be successful, the targeted user would...

8.8CVSS2.5AI score0.04006EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2020/09/08 12:0 a.m.3 views

PT-2020-4018 · Microsoft +1 · Xamarin.Forms +1

Name of the Vulnerable Software and Affected Versions: Microsoft Xamarin.Forms versions prior to 83.0.4103.106 Description: A spoofing issue exists due to the default settings on Android WebView, allowing an attacker to execute arbitrary Javascript code on a target system. The attack requires the...

9.3CVSS6.1AI score0.04006EPSS
Exploits0References3
OSV
OSV
added 2020/08/12 4:19 a.m.7 views

OPENSUSE-SU-2020:1181-1 Security update of chromium

Chromium was updated to 84.0.4147.105 boo1174582: CVE-2020-6537: Type Confusion in V8 CVE-2020-6538: Inappropriate implementation in WebView CVE-2020-6532: Use after free in SCTP CVE-2020-6539: Use after free in CSS CVE-2020-6540: Heap buffer overflow in Skia CVE-2020-6541: Use after free in WebU...

8.8CVSS8AI score0.22868EPSS
Exploits0References8
OpenVAS
OpenVAS
added 2020/08/12 12:0 a.m.19 views

Google Chrome Security Update (stable-channel-update-for-desktop_27-2020-07) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

8.8CVSS8.7AI score0.22868EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2020/08/10 6:40 a.m.1 views

chromium-browser: Inappropriate implementation in WebView

Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.4AI score0.01015EPSS
Exploits0References5
OSV
OSV
added 2020/08/07 12:33 p.m.4 views

OPENSUSE-SU-2020:1161-1 Security update of chromium

Chromium was updated to 84.0.4147.105 boo1174582: CVE-2020-6537: Type Confusion in V8 CVE-2020-6538: Inappropriate implementation in WebView CVE-2020-6532: Use after free in SCTP CVE-2020-6539: Use after free in CSS CVE-2020-6540: Heap buffer overflow in Skia CVE-2020-6541: Use after free in WebU...

8.8CVSS8AI score0.22868EPSS
Exploits0References8
OPENSUSE Linux
OPENSUSE Linux
added 2020/08/07 12:0 a.m.80 views

Security update of chromium (low)

openSUSE Security Update: Security update of chromium Announcement ID: openSUSE-SU-2020:1161-1 Rating: low References: 1174582 Cross-References: CVE-2020-6532 CVE-2020-6537 CVE-2020-6538 CVE-2020-6539 CVE-2020-6540 CVE-2020-6541 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixe...

8.8CVSS8.9AI score0.22868EPSS
Exploits0References1
Veracode
Veracode
added 2020/08/06 9:34 p.m.20 views

Authorization Bypass

chromium is vulnerable to Authorization Bypass. The vulnerability exists as an insufficient policy enforcement in WebView in Google Chrome on Android prior to 83.0.4103.106 allowed a remote attacker to bypass site isolation via a crafted HTML page...

6.5CVSS3.4AI score0.03819EPSS
Exploits0References18Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/08/05 12:0 a.m.2 views

The vulnerability in the implementation of the WebView user interface of the Chromium browser by Google Chrome allows a perpetrator to compromise data integrity.

The vulnerability of the WebView implementation in the Chromium browser’s user interface is related to a resource management mechanism error. Exploiting this vulnerability allows an attacker to compromise data integrity through a specially created application...

4.3CVSS6.6AI score0.0172EPSS
Exploits1References13Affected Software5
RedhatCVE
RedhatCVE
added 2020/07/28 5:38 p.m.26 views

CVE-2020-6538

Inappropriate implementation in WebView in Google Chrome on Android prior to 84.0.4147.105 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS3.2AI score0.01015EPSS
Exploits0References4
CNVD
CNVD
added 2020/07/28 12:0 a.m.2 views

Google Chrome WebView Security Bypass Vulnerability (CNVD-2020-49887)

Google Chrome is a Web browser from Google, and WebView is a Webkit-based control for displaying Web pages. A security vulnerability exists in WebView in Google Chrome versions prior to 84.0.4147.105. The vulnerability can be exploited by an attacker to compromise a system with the help of a...

6.5CVSS8.9AI score0.01015EPSS
Exploits0References1
Kaspersky
Kaspersky
added 2020/07/27 12:0 a.m.310 views

KLA11917 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in WebUSB can be exploited to cause denial of service. 2. Heap...

8.8CVSS9.2AI score0.22868EPSS
Exploits1References4
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2020/07/27 12:0 a.m.32 views

Stable Channel Update for Desktop

The stable channel has been updated to 84.0.4147.105 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. A list of all changes is available in the log. Interested in switching release channels? Find out how. If you find a new issue, please let us know by filing a bug. The...

8.8CVSS8.6AI score0.22868EPSS
Exploits1Affected Software1
FreeBSD
FreeBSD
added 2020/07/27 12:0 a.m.35 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This update contains 8 security fixes, including: 1105318 High CVE-2020-6537: Type Confusion in V8. Reported by Alphalaab on 2020-07-14 1096677 High CVE-2020-6538: Inappropriate implementation in WebView. Reported by Yongke Wang@Rudykewang and Aryb1n@aryb1n of Tencent...

8.8CVSS8.7AI score0.22868EPSS
Exploits0References1
Rows per page
Query Builder