2656 matches found
CVE-2021-37995
Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox URL bar via a crafted HTML page...
UBUNTU-CVE-2021-37985
Use after free in V8 in Google Chrome prior to 95.0.4638.54 allowed a remote attacker who had convinced a user to allow for connection to debugger to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2021-37995
Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox URL bar via a crafted HTML page...
DEBIAN-CVE-2021-37977
Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-37979
heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page...
The vulnerability of the reading mode in Google Chrome’s web browser involves writing beyond the buffer in memory, allowing an attacker to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Google Chrome web browser’s reading mode is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created...
The vulnerability of the TabStrip control element in Google Chrome web browsers involves an operation that goes beyond the acceptable buffer data limit. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the TabStrip control element in Google Chrome browsers relates to the execution of operations that exceed the allowed buffer data limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service...
The vulnerability of the PopupBlocker component in the Google Chrome web browser, related to improper authorization, allows a hacker to compromise data integrity.
The vulnerability of the PopupBlocker component in the Google Chrome web browser is related to insufficient implementation of policies. Exploiting this vulnerability could allow a malicious actor to compromise data integrity through a specially created iframe...
The vulnerability of the BFCache component in Google Chrome web browsers, related to the use of memory after it is freed, allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the BFCache component in Google Chrome’s web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created...
Google Chrome is Abused to Deliver Malware as Legit Windows 10 App
Crooks behind a newly identified malware campaign are targeting Windows 10 with malware that can infect systems via a technique that cleverly bypasses Windows cybersecurity protections called User Account Control UAC. Researchers from Rapid7 recently identified the campaign and warn the goal of t...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to gain access to the system.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to errors in checking the security of standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to the system remotely...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser, which involves reading data beyond the allowed buffer limit, allows attackers to access confidential data and cause service interruptions.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 browser relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow a remote attacker to access confidential data and also cause service interruptions through a specially created HTML page...
The vulnerability of the Bookmarks component in the Google Chrome web browser, related to memory usage after it is freed, allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failures.
The vulnerability of the Bookmarks component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially...
The vulnerability of the Content Security Policy component in the Google Chrome web browser, related to improper authorization, allows attackers to compromise data integrity.
The vulnerability of the Content Security Policy component in the Google Chrome web browser is related to insufficient implementation of policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...
The vulnerability in the Accessibility component of the Google Chrome web browser relates to memory usage after it is released. This allows attackers to access confidential data, compromise its integrity, and cause service interruptions.
The vulnerability of the Accessibility component in the Google Chrome web browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a...
VulnCheck KEV: CVE-2021-38003
Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera...
The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.
The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted HTML page...
CVE-2021-37971
Incorrect security UI in Web Browser UI in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...
DEBIAN-CVE-2021-30633
Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...