KLA12299 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface. Below is a complete list of vulnerabilities: 1. A use after free vulnerability in Tab...

Denial Of Service

chromium is vulnerable to Denial of Service. The vulnerability exists due to a Use after free in Browser UI in Google Chrome...

Denial Of Service

chromium is vulnerable to Denial of Service. The vulnerability exists due to a Use after free in Browser UI in Google Chrome...

Design/Logic Flaw

Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device...

CVE-2021-30597

Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device...

CVE-2021-30597

Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device...

CVE-2021-30597

CVE-2021-30597 is a use-after-free vulnerability in the Browser UI of the Chromium/Chrome stack prior to version 92.0.4515.131. The issue, located in the Browser UI component, enables a remote attacker to potentially trigger heap corruption and execute arbitrary code via crafted web content or in...

CVE-2021-30597

Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device...

Chromium: CVE-2021-30597 Use after free in Browser UI

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

FreeBSD : chromium -- multiple vulnerabilities (c3c6c4a3-f47d-11eb-b632-3065ec8fd3ec)

Chrome Releases reports : This release contains 10 security fixes, including : - 1227777 High CVE-2021-30590: Heap buffer overflow in Bookmarks. Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2021-07-09 - 1229298 High CVE-2021-30591: Use after free in File System API. Reported by...

Google Chrome Post-release Reuse Vulnerability (CNVD-2021-62183)

Chrome is a web browsing tool developed by Google, and a post-release reuse vulnerability exists in the "Browser UI" in versions of Google Chrome prior to 92.0.4515.131. An attacker could use this vulnerability to execute arbitrary code or cause a denial of service condition on the system...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 10 security fixes, including: 1227777 High CVE-2021-30590: Heap buffer overflow in Bookmarks. Reported by Leecraso and Guang Gong of 360 Alpha Lab on 2021-07-09 1229298 High CVE-2021-30591: Use after free in File System API. Reported by SorryMybad...

CVE-2021-20560

Affected software: IBM Sterling Connect:Direct Browser User Interface (UI) versions 1.4.1.1 and 1.5.0.2. Root cause / vulnerability type: Missing protection for HTML frames (no X-Frame-Options header) enabling a remote attacker to perform clickjacking by convincing a user to visit a malicious sit...

The vulnerability of Google Chrome’s user interface allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the Google Chrome browser user interface is related to insufficient validation of entered data. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

CVE-2019-3562

A remote web page could inject arbitrary HTML code into the Oculus Browser UI, allowing an attacker to spoof UI and potentially execute code. This affects the Oculus Browser starting from version 5.2.7 until 5.7.11...

CVE-2018-5124

CVE-2018-5124 affects Mozilla Firefox prior to 58.0.1. The issue arises from unsanitized output in the browser UI, where HTML fragments are left intact, enabling arbitrary code execution as described by the MFSA advisory and related references. The vulnerability is tied to sanitization of HTML fr...

Information disclosure

Lack of secure text entry mode in Browser UI in Google Chrome on Mac prior to 67.0.3396.62 allowed a local attacker to obtain potentially sensitive information from process memory via a local process...

CVE-2018-18346

Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page...

CVE-2018-18346

Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page...

Hardcoded credentials

Incorrect handling of alert box display in Blink in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to present confusing browser UI via a crafted HTML page...