Lucene search
+L

2702 matches found

BDU FSTEC
BDU FSTEC
added 2021/10/27 12:00 a.m.8 views

The vulnerability of the Content Security Policy component in the Google Chrome web browser, related to improper authorization, allows attackers to compromise data integrity.

The vulnerability of the Content Security Policy component in the Google Chrome web browser is related to insufficient implementation of policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

4.3CVSS6.6AI score0.01167EPSS
SaveExploits1References11Affected Software5
VulnCheck KEV
VulnCheck KEV
added 2021/10/26 12:00 a.m.4 views

VulnCheck KEV: CVE-2021-38003

Google Chromium V8 Engine has a bug in JSON.stringify, where the internal TheHole value can leak to script code, causing memory corruption. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera...

8.8CVSS7.3AI score0.38573EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
added 2021/10/13 12:00 a.m.20 views

The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to execute arbitrary code.

The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted HTML page...

9.3CVSS7.9AI score0.10586EPSS
SaveExploits0References5Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/10/08 10:15 p.m.7 views

CVE-2021-37971

Incorrect security UI in Web Browser UI in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

4.3CVSS6.8AI score0.01263EPSS
SaveExploits1References8
OSV
OSV
added 2021/10/08 9:15 p.m.7 views

DEBIAN-CVE-2021-30633

Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS8.6AI score0.32657EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/08 9:15 p.m.2 views

DEBIAN-CVE-2021-30628

Stack buffer overflow in ANGLE in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page...

8.8CVSS8.9AI score0.00979EPSS
SaveExploits0References1
OSV
OSV
added 2021/10/08 9:15 p.m.4 views

DEBIAN-CVE-2021-30627

Type confusion in Blink layout in Google Chrome prior to 93.0.4577.82 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.00905EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2021/10/08 12:00 a.m.23 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine arises due to an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information through a...

9.3CVSS7.6AI score0.00882EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:00 a.m.11 views

The vulnerability of the component of the Blink module for browsers Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Blink module component of Google Chrome and Microsoft Edge browsers is related to data type conversion errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

10CVSS8.2AI score
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:00 a.m.26 views

The vulnerability of the Indexed DB API for browser storage interfaces in Google Chrome and Microsoft Edge allows a attacker to trigger a service failure or execute arbitrary code.

The vulnerability of the Indexed DB API for browser-based structured data storage in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially...

10CVSS8.2AI score0.32657EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:00 a.m.16 views

The vulnerability of the Sign-In component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Sign-In component in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code through a specially created web page...

8.8CVSS7.9AI score0.04159EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:00 a.m.12 views

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to cause service interruptions or execute arbitrary code through a specially created web page...

10CVSS8.5AI score0.00979EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/09/29 12:00 a.m.15 views

The vulnerability of the Blink rendering module in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure.

The vulnerability of the Blink rendering module in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to cause a service failure through a specially created web page...

7.6CVSS6.7AI score0.00732EPSS
SaveExploits0References9Affected Software5
CNNVD
CNNVD
added 2021/09/21 12:00 a.m.12 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in the File System API in versions of Google Chrome prior to 94.0.4606.54. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

8.8CVSS9.1AI score0.01451EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
added 2021/09/13 12:00 a.m.9 views

PT-2021-7878 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 93.0.4577.82 Description: The issue is related to a use after free in Blink, allowing a remote attacker to perform arbitrary read/write via a crafted HTML page. This can potentially bypass existing security...

10CVSS8.2AI score0.38573EPSS
SaveExploits41References319
Veracode
Veracode
added 2021/09/02 1:10 a.m.32 views

Denial Of Service

chromium is vulnerable to Denial of Service. The vulnerability exists due to a Use after free in Browser UI in Google Chrome...

8.8CVSS2.9AI score0.02524EPSS
SaveExploits1References9Affected Software2
OSV
OSV
added 2021/08/26 6:15 p.m.2 views

DEBIAN-CVE-2021-30597

Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device...

6.8CVSS6.3AI score0.01254EPSS
SaveExploits1References1
OSV
OSV
added 2021/08/26 6:15 p.m.6 views

UBUNTU-CVE-2021-30597

Use after free in Browser UI in Google Chrome on Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device...

6.8CVSS6.5AI score0.01254EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/08/25 12:00 a.m.16 views

The vulnerability of the UI framework component of Google Chrome web browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the UI framework component in Google Chrome’s web browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by opening a specially created malicious...

7.8CVSS7.6AI score0.01592EPSS
SaveExploits1References7Affected Software2
BDU FSTEC
BDU FSTEC
added 2021/08/12 12:00 a.m.12 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to incorrect type conversion. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

10CVSS7.8AI score0.04737EPSS
SaveExploits2References7Affected Software3
Rows per page
Query Builder