Lucene search
+L

169 matches found

Veracode
Veracode
•added 2022/08/11 8:23 a.m.•37 views

Information Disclosure

chrome is vulnerable to information disclosure. The vulnerability exists due to an Insufficient policy enforcement in Background Fetch allowing an attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.6AI score0.00795EPSS
SaveExploits0References6Affected Software3
Tenable Nessus
Tenable Nessus
•added 2022/08/06 12:00 a.m.•229 views

Microsoft Edge (Chromium) < 104.0.1293.47 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 104.0.1293.47. It is, therefore, affected by multiple vulnerabilities as referenced in the August 5, 2022 advisory. - Use after free in Omnibox. CVE-2022-2603 - Use after free in Safe Browsing. CVE-2022-2604 - Out of...

9.6CVSS6.9AI score0.023EPSS
SaveExploits3References41
Mageia
Mageia
•added 2022/08/05 9:00 p.m.•155 views

Updated chromium-browser-stable packages fix security vulnerability

1325699 High CVE-2022-2603: Use after free in Omnibox. Reported by Anonymous on 2022-05-16 1335316 High CVE-2022-2604: Use after free in Safe Browsing. Reported by Nan Wang@eternalsakura13 and Guang Gong of 360 Alpha Lab on 2022-06-10 1338470 High CVE-2022-2605: Out of bounds read in Dawn. Report...

8.8CVSS0.3AI score0.00985EPSS
SaveExploits3References3
Microsoft CVE
Microsoft CVE
•added 2022/08/05 7:00 a.m.•51 views

Chromium: CVE-2022-2610 Insufficient policy enforcement in Background Fetch

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.2AI score0.00795EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/08/03 12:00 a.m.•53 views

FreeBSD : chromium -- multiple vulnerabilities (96a41723-133a-11ed-be3b-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 96a41723-133a-11ed-be3b-3065ec8fd3ec advisory. - Use after free in Omnibox. CVE-2022-2603 - Use after free in Safe Browsing. CVE-2022-2604 -...

8.8CVSS7.4AI score0.00985EPSS
SaveExploits3References24
Kaspersky
Kaspersky
•added 2022/08/02 12:00 a.m.•570 views

KLA12600 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. Out of boun...

8.8CVSS10AI score0.00985EPSS
SaveExploits6References2
OSV
OSV
•added 2022/07/23 12:15 a.m.•21 views

CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.9AI score
SaveExploits0References3
OSV
OSV
•added 2022/07/23 12:15 a.m.•6 views

DEBIAN-CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.9AI score0.00901EPSS
SaveExploits1References1
NVD
NVD
•added 2022/07/23 12:15 a.m.•18 views

CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS0.00901EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/07/23 12:15 a.m.•14 views

CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.8AI score0.00901EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
•added 2022/07/23 12:15 a.m.•40 views

CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.8AI score0.00901EPSS
SaveExploits1References1
OSV
OSV
•added 2022/07/23 12:15 a.m.•11 views

UBUNTU-CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7AI score0.00901EPSS
SaveExploits1References2
CVE
CVE
•added 2022/07/22 11:38 p.m.•257 views

CVE-2022-1139

CVE-2022-1139 refers to an inappropriate implementation in Chrome’s Background Fetch API that could allow a remote attacker to leak cross-origin data via a crafted HTML page. The issue is associated with Chrome/Chromium before version 100.0.4896.60 and was acknowledged in Google’s March 29, 2022 ...

6.5CVSS6.2AI score0.00901EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
•added 2022/07/22 11:38 p.m.•100 views

CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.1AI score0.00901EPSS
SaveExploits1
Cvelist
Cvelist
•added 2022/07/22 11:38 p.m.•47 views

CVE-2022-1139

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.6AI score0.00901EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/22 12:00 a.m.•3 views

CVE-2022-1139: Observable Discrepancy

Inappropriate implementation in Background Fetch API in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.00901EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2022/04/07 12:00 a.m.•20 views

The vulnerability of the software interface of the Background Fetch API in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Background Fetch API programming interface in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected...

9.4CVSS6.8AI score0.00901EPSS
SaveExploits1References10Affected Software6
Veracode
Veracode
•added 2022/04/04 6:45 p.m.•24 views

Remote Code Execution

chromium is vulnerable to remote code execution. Lack of proper checking in the Background Fetch API component allows an attacker to upload and execute malicious code on the system under attack...

6.5CVSS4.8AI score0.00901EPSS
SaveExploits1References4Affected Software2
Microsoft CVE
Microsoft CVE
•added 2022/04/01 7:00 a.m.•38 views

Chromium: CVE-2022-1139 Inappropriate implementation in Background Fetch API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.2AI score0.00901EPSS
SaveExploits1
Kaspersky
Kaspersky
•added 2022/04/01 12:00 a.m.•88 views

KLA12495 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Portals can be...

8.8CVSS9.5AI score0.01845EPSS
SaveExploits15References26
Rows per page
Query Builder