Lucene search
+L

2702 matches found

OSV
OSV
added 2022/02/12 2:15 a.m.3 views

DEBIAN-CVE-2022-0290

Use after free in Site isolation in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS8.4AI score0.02038EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/12 2:15 a.m.5 views

UBUNTU-CVE-2022-0308

Use after free in Data Transfer in Google Chrome on Chrome OS prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.0075EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/12 12:15 a.m.11 views

CVE-2022-0120

Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially leak cross-origin data via a malicious website...

6.5CVSS7.2AI score0.0075EPSS
SaveExploits1References9
ATTACKERKB
ATTACKERKB
added 2022/02/12 12:15 a.m.7 views

CVE-2022-0105

Use after free in PDF Accessibility in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.8AI score0.0129EPSS
SaveExploits1References9
ATTACKERKB
ATTACKERKB
added 2022/02/12 12:15 a.m.9 views

CVE-2022-0100

Heap buffer overflow in Media streams API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.1AI score0.015EPSS
SaveExploits1References9
ATTACKERKB
ATTACKERKB
added 2022/02/12 12:15 a.m.16 views

CVE-2022-0115

Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...

8.8CVSS7.8AI score0.01496EPSS
SaveExploits1References9
OSV
OSV
added 2022/02/12 12:15 a.m.4 views

DEBIAN-CVE-2022-0114

Out of bounds memory access in Blink Serial API in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page and virtual serial port driver...

8.1CVSS8.3AI score0.01306EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/11 11:15 p.m.5 views

UBUNTU-CVE-2021-4102

Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.07836EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/02/01 12:00 a.m.11 views

PT-2022-25304 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 98.0.4758.80 Description: The issue is related to an inappropriate implementation in Paint, allowing a remote attacker to leak cross-origin data outside an iframe via a crafted HTML page. This can be achieved b...

9.6CVSS6.3AI score0.24389EPSS
SaveExploits71References405
Veracode
Veracode
added 2022/01/15 12:05 a.m.18 views

Incorrect Security UI In Browser UI

Chrome has Incorrect security The vulnerability exists due to an incorrect security UI in the Browser...

4.3CVSS2.7AI score0.01114EPSS
SaveExploits1References9Affected Software2
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:00 a.m.9 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafted HTML page...

7.5CVSS7.7AI score0.00961EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:00 a.m.18 views

The vulnerability in the Google Updater application for browser-based downloads in Google Chrome and the Windows operating system arises from insecure privilege management. This allows a malicious individual to escalate their privileges through a created file.

The vulnerability of the Google Updater application for browser-based downloads in Google Chrome and Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability allows a malicious actor to elevate their privileges through a specially created file...

8.8CVSS7.2AI score0.00949EPSS
SaveExploits0References8Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:00 a.m.14 views

The vulnerability of Google Chrome’s Incognito mode allows a hacker to bypass existing security restrictions.

The vulnerability of Google Chrome’s Incognito mode is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions through a specially created HTML page...

8.8CVSS7.6AI score0.00904EPSS
SaveExploits0References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:00 a.m.12 views

The vulnerability of the API for working with computer graphics in Google Chrome browser’s WebGPU, related to the use of memory after it is freed, allows attackers to circumvent existing security restrictions.

The vulnerability of the API for working with computer graphics in Google Chrome’s WebGPU browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions through a specially created HTML page...

8.8CVSS7.6AI score0.01245EPSS
SaveExploits0References11Affected Software8
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:00 a.m.18 views

The vulnerability of Google Chrome’s browser task managers, related to the use of memory after it is freed, allows a hacker to execute arbitrary commands.

The vulnerability of Google Chrome’s browser tasks handler is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

8.8CVSS8AI score0.00944EPSS
SaveExploits0References8Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:00 a.m.12 views

The vulnerability of the WebRTC extension in Google Chrome allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebRTC extension in Google Chrome browser stems from an overflow in the buffer in dynamic memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information by using specially created...

7.5CVSS7.9AI score0.00846EPSS
SaveExploits0References6Affected Software3
CNNVD
CNNVD
added 2022/01/04 12:00 a.m.12 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in Google Chrome ANGLE, which can be exploited by remote attackers to overflow the buffer and execute arbitrary code on the system, or cause the application to crash...

8.8CVSS9.2AI score0.01344EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:00 a.m.15 views

The vulnerability of Google Chrome’s cookie handling mechanism, related to authentication errors, allows a violator to circumvent existing access restrictions policies.

The vulnerability of Google Chrome’s cookie handling mechanism is related to authentication errors. Exploiting this vulnerability allows a remote attacker to circumvent existing policies regarding access restrictions for HTML elements through a specially created HTML page...

4.3CVSS6.7AI score0.01143EPSS
SaveExploits1References12Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:00 a.m.12 views

The vulnerability of the browser’s Background Fetch API programming interface in Google Chrome allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s software interface is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

4.3CVSS5.8AI score0.0121EPSS
SaveExploits0References11Affected Software8
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:00 a.m.16 views

The vulnerability of the Google Chrome browser’s File System API, related to the use of memory after it is freed, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Google Chrome browser’s File System API relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

8.8CVSS7.6AI score0.01451EPSS
SaveExploits1References11Affected Software8
Rows per page
Query Builder