Lucene search
+L

2656 matches found

OSV
OSV
added 2021/04/30 9:15 p.m.5 views

UBUNTU-CVE-2021-21233

Heap buffer overflow in ANGLE in Google Chrome on Windows prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS6.1AI score0.01317EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/30 9:15 p.m.9 views

UBUNTU-CVE-2021-21227

Insufficient data validation in V8 in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01189EPSS
SaveExploits0References2
Citrix
Citrix
added 2021/04/29 12:00 a.m.13 views

Receiver for Web Workaround with NPAPI Support Removal in Google Chrome

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. The removal of NPAPI support will affect user experience for users who access Citrix Receiver for We...

7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2021/04/27 12:00 a.m.15 views

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.3CVSS7.6AI score0.01754EPSS
SaveExploits0References12Affected Software6
OSV
OSV
added 2021/04/26 5:15 p.m.1 views

DEBIAN-CVE-2021-21206

Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.4AI score0.09401EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/26 5:15 p.m.3 views

DEBIAN-CVE-2021-21205

Insufficient policy enforcement in navigation in Google Chrome on iOS prior to 90.0.4430.72 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page...

8.1CVSS8AI score0.01473EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/26 5:15 p.m.2 views

DEBIAN-CVE-2021-21207

Use after free in IndexedDB in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Chrome Extension...

8.6CVSS7.9AI score0.00943EPSS
SaveExploits0References1
OSV
OSV
added 2021/04/26 5:15 p.m.7 views

UBUNTU-CVE-2021-21218

Uninitialized data in PDFium in Google Chrome prior to 90.0.4430.72 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted PDF file...

5.5CVSS7.3AI score0.01336EPSS
SaveExploits0References2
OSV
OSV
added 2021/04/26 5:15 p.m.11 views

UBUNTU-CVE-2021-21225

Out of bounds memory access in V8 in Google Chrome prior to 90.0.4430.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.06625EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.8 views

The vulnerability of the “Network” panel display on Google Chrome and Microsoft Edge browsers allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the “Network” panel display in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a...

4.3CVSS7AI score0.01905EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.11 views

The vulnerability in the web interface for supporting Web MIDI devices allows attackers to compromise the confidentiality of protected information. This vulnerability is present in browsers like Google Chrome and Microsoft Edge.

The vulnerability in web interfaces for supporting Web MIDI devices, such as Google Chrome and Microsoft Edge browsers, is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality of protected information through...

7.3CVSS7.6AI score0.01516EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.10 views

The vulnerability of the navigation function in Google Chrome and Microsoft Edge browsers allows attackers to bypass existing security restrictions.

The vulnerability of the Navigation function in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created web page...

10CVSS7.5AI score0.01473EPSS
SaveExploits0References8Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/04/21 12:00 a.m.10 views

The vulnerability of the PDFium PDF-content processor in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the PDFium PDF-content processing component in Google Chrome and Microsoft Edge browsers is related to the use of an uninitialized resource. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created web page...

4.3CVSS6.7AI score0.01336EPSS
SaveExploits0References12Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/04/08 12:00 a.m.12 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code or cause a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or cause a service denial using a specially created link...

7.3CVSS8.5AI score0.01353EPSS
SaveExploits0References13Affected Software7
CNNVD
CNNVD
added 2021/03/31 12:00 a.m.11 views

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google. A post-release reuse vulnerability exists in V8 in versions prior to Google Chrome 89.0.4389.114. A programmed attacker can exploit this vulnerability to cause heap damage via a crafted HTML page...

8.8CVSS5.6AI score0.01353EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.10 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to data writing beyond the buffer. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

6.5CVSS7AI score0.99595EPSS
SaveExploits14References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.12 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine, related to writing beyond the buffer limit, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause service failures...

7.3CVSS7.8AI score0.18935EPSS
SaveExploits6References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.17 views

The vulnerability of the Google Chrome browser’s presentation API involves the use of a memory area after it is freed. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s presentation API relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7.7AI score0.02296EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.10 views

The vulnerability of the Blink rendering module in Google Chrome browsers, related to the improper assignment of permissions for critical resources, allows attackers to compromise data integrity.

The vulnerability of Google Chrome’s Blink rendering module is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

4.3CVSS7AI score0.01495EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.7 views

The vulnerability of the WebRTC component in Google Chrome browser allows a hacker to induce a service failure.

The vulnerability of the WebRTC component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

7.3CVSS7.6AI score0.01374EPSS
SaveExploits1References10Affected Software6
Rows per page
Query Builder