Lucene search
+L

2702 matches found

CNNVD
CNNVD
added 2021/03/31 12:00 a.m.14 views

Google Chrome 资源管理错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google. A post-release reuse vulnerability exists in V8 in versions prior to Google Chrome 89.0.4389.114. A programmed attacker can exploit this vulnerability to cause heap damage via a crafted HTML page...

8.8CVSS5.6AI score0.01353EPSS
SaveExploits0References11
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.11 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to data writing beyond the buffer. Exploiting this vulnerability could allow a malicious actor to cause a service failure through a specially crafted HTML page...

6.5CVSS7AI score0.99595EPSS
SaveExploits14References10Affected Software4
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.12 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine, related to writing beyond the buffer limit, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause service failures...

7.3CVSS7.8AI score0.19082EPSS
SaveExploits6References8Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.18 views

The vulnerability of the Google Chrome browser’s presentation API involves the use of a memory area after it is freed. This allows an attacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome browser’s presentation API relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7.7AI score0.02296EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.11 views

The vulnerability of the Blink rendering module in Google Chrome browsers, related to the improper assignment of permissions for critical resources, allows attackers to compromise data integrity.

The vulnerability of Google Chrome’s Blink rendering module is related to the improper assignment of permissions for the critical resource. Exploiting this vulnerability can allow a remote attacker to compromise data integrity...

4.3CVSS7AI score0.01495EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.9 views

The vulnerability of the WebRTC component in Google Chrome browser allows a hacker to induce a service failure.

The vulnerability of the WebRTC component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure through a specially created HTML page...

7.3CVSS7.6AI score0.01374EPSS
SaveExploits1References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/30 12:00 a.m.11 views

The vulnerability of the OffscreenCanvas function in Google Chrome browsers allows attackers to access confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the OffscreenCanvas function in Google Chrome browsers is related to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

6.8CVSS7.7AI score0.01636EPSS
SaveExploits0References14Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:00 a.m.12 views

The vulnerability of the PDFium PDF-content processor in Google Chrome browsers allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the PDFium PDF-content processor in the Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

7.3CVSS7.7AI score0.01655EPSS
SaveExploits1References12Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:00 a.m.11 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mismatches. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause service failures...

7.3CVSS7.7AI score0.02948EPSS
SaveExploits0References16Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:00 a.m.12 views

The vulnerability of Google Chrome’s IndexedDB component allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s IndexedDB component relates to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

9.3CVSS7.7AI score0.29292EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:00 a.m.13 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to access to data without type control. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

6.8CVSS7.6AI score0.01952EPSS
SaveExploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:00 a.m.11 views

The vulnerability in the implementation of the WebUSB protocol of Google Chrome, related to the use of memory after it is freed, allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the WebUSB protocol implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

7.3CVSS7.7AI score0.22868EPSS
SaveExploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:00 a.m.13 views

The vulnerability of the Google Chrome browser’s media component, which allows a hacker to access confidential data

The vulnerability of the Google Chrome browser’s media component is related to security issues with the user interface. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

4.3CVSS6.9AI score0.01084EPSS
SaveExploits0References9Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/21 12:00 a.m.10 views

The vulnerability in the implementation of the WebRTC technology in Google Chrome browser allows a hacker to gain access to confidential data.

The vulnerability of the WebRTC technology implemented in Google Chrome browser is related to the lack of a mechanism for verifying input data. Exploiting this vulnerability can allow an attacker operating remotely to gain access to confidential data...

4.3CVSS6.4AI score0.01306EPSS
SaveExploits0References14Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.11 views

The vulnerability of the WebRTC extension in the Google Chrome web browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebRTC extension in the Google Chrome web browser relates to its use after release. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

7.3CVSS7.6AI score0.01376EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.13 views

The vulnerability of Google Chrome’s user interface allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser user interface is related to errors in cryptographic transformations. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

5.3CVSS7AI score0.01599EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:00 a.m.12 views

The vulnerability of Google Chrome’s HTTP protocol implementation lies in the improper implementation of security checks for standard elements, allowing attackers to compromise the confidentiality and accessibility of protected information.

The vulnerability of Google Chrome’s HTTP protocol implementation is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and accessibility of protected information...

7.3CVSS7.6AI score0.01501EPSS
SaveExploits1References11Affected Software6
OSV
OSV
added 2021/03/09 6:15 p.m.8 views

UBUNTU-CVE-2021-21183

Inappropriate implementation in performance APIs in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

4.3CVSS7.3AI score0.0104EPSS
SaveExploits1References2
OSV
OSV
added 2021/03/09 6:15 p.m.8 views

UBUNTU-CVE-2021-21187

Insufficient data validation in URL formatting in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name...

4.3CVSS6.6AI score0.01451EPSS
SaveExploits0References2
OSV
OSV
added 2021/03/09 6:15 p.m.5 views

UBUNTU-CVE-2021-21172

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89.0.4389.72 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...

8.1CVSS7.3AI score0.0165EPSS
SaveExploits1References2
Rows per page
Query Builder