4138 matches found
Chrome targeted by Magnitude exploit kit
Exploit kits EK are not as widespread as they used to be. One of the reasons is likely that most exploit kits targeted software that is hardly ever used anymore. Internet Explorer, Silverlight, and Flash Player to name a few, have been deprecated, replaced, and quickly lost their user-base. So,...
Google Chrome 安全特征问题漏洞
Chrome is a web browsing tool developed by Google. versions prior to Google Chrome 95.0.4638.54 are vulnerable to an improper implementation of WebApp Installer. An attacker could potentially override and spoof the content of the multi-function box URL bar via a crafted HTML page...
Google Chrome 缓冲区错误漏洞
Chrome is a web browsing tool developed by Google. a heap buffer overflow vulnerability exists in PDFium in versions prior to Google Chrome 95.0.4638.54. A remote attacker could exploit this vulnerability to potentially exploit heap corruption via a crafted HTML page...
Google Chrome 缓冲区错误漏洞
Chrome is a web browsing tool developed by Google. Skia in versions prior to Google Chrome 95.0.4638.54 is vulnerable to a heap buffer overflow. A remote attacker can exploit this vulnerability to be able to perform a sandbox escape via a crafted HTML page...
DEBIAN-CVE-2021-37968
Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
CVE-2021-37974
Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2021-37957
Use after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
UBUNTU-CVE-2021-30633
Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...
CVE-2021-30633
Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to trigger a service failure or execute arbitrary code.
The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to operations performed outside of the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code through a specially created web page...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Base internals. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...
UBUNTU-CVE-2021-30599
Type confusion in V8 in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page...
CVE-2021-30594
Use after free in Page Info UI in Google Chrome prior to 92.0.4515.131 allowed a remote attacker to potentially exploit heap corruption via physical access to the device...
The vulnerability of Google Chrome web browser’s animation implementation allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of Google Chrome web browser’s animation implementation is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by opening a specially created...
Security Bulletin: IBM Security Privileged Identity Manager is affected by security vulnerabilities (CVE-2020-1971, CVE-2020-15999, CVE-2017-12652)
Summary IBM Security Privileged Identity Manager has addressed several security issues as follows. Vulnerability Details CVEID: CVE-2020-1971 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a NULL pointer dereference. If the GENERALNAMEcmp function contain an EDIPARTYNAME, an...
Microsoft Edge 安全漏洞
Chrome, a web browsing tool developed by Google, is vulnerable to a type obfuscation vulnerability in V8 in versions prior to Google Chrome 92.0.4515.159. An attacker could exploit this vulnerability to execute arbitrary code inside a sandbox via a crafted HTML page...
The vulnerability in the Google Chrome web browser, related to insufficient validation of data entered by users, allows attackers to carry out spear-phishing attacks.
The vulnerability in the Google Chrome web browser is related to insufficient validation of the data entered by users in the “Downloads” folder. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created malicious web page...
DEBIAN-CVE-2021-30568
Heap buffer overflow in WebGL in Google Chrome prior to 92.0.4515.107 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-30566
Stack buffer overflow in Printing in Google Chrome prior to 92.0.4515.107 allowed a remote attacker who had compromised the renderer process to potentially exploit stack corruption via a crafted HTML page...