Windows Code Execution

The vulnerability of the Windows operating system’s print queue dispatcher is related to security configuration errors. Exploiting this vulnerability allows a perpetrator performing a “man-in-the-middle” attack to execute arbitrary code using a specially crafted print driver during printer...

Mac OS X Kernel Memory Disclosure

The vulnerability of the Intel Graphics Driver component for the Mac OS X operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, acting remotely, to gain access to protected kernel memory through a specially created application...

Firefox Address Bar Modification

The vulnerability of Firefox browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to modify the address bar settings remotely after entering a URL...

Google Chrome Access Restriction Bypass

The vulnerability of the DecodeHSTSPreloadRaw function in the net/http/transportsecuritystate.cc file of Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to circumvent access restrictions by manipulating the URL strings...

Microsoft Edge Bypass Content Protection

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass content protection policies using a specially crafted document...

Microsoft Edge Security Bypass

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing access control policies...

Microsoft Edge Security Bypass

The vulnerability of Microsoft Edge is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing access control policies...

PostgreSQL Access Restriction Bypass

The vulnerability of the PostgreSQL database management system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to circumvent existing access restrictions by using a session that executes queries from more than one role...

Android Server Replacement

The vulnerability of the caching function in the TrustManagerImpl class TrustManagerImpl.java of the Conscrypt component in the Android operating system is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace servers by accessing...

Android Data Compromise Bypass

The vulnerability of the libstagefright library in the Android operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information or bypass security mechanisms using specially crafted Bitstre...

Mac OS X Security Bypass

The vulnerability of the dyld component in the Mac OS X operating system is related to security configuration errors. Exploiting this vulnerability could allow an attacker acting locally to bypass security measures by using a modified application...

Android Security Bypass Data Deletion

The vulnerability of the Android operating system is related to security configuration errors. Exploiting this vulnerability allows a local attacker to bypass security measures and delete data...

Ruby on Rails Auth Bypass

The vulnerability of the httpbasicauthenticatewith method in the ActionController/lib/actioncontroller/metal/httpauthentication.rb implementation of Basic Authentication in the Ruby on Rails software framework is related to security configuration errors. Exploiting this vulnerability allows a...

SAUTER moduWeb Vision Authentication Bypass

The vulnerability of the BACnet/IP network controller visualization web server from SAUTER moduWeb Vision is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass authentication procedures by utilizing knowledge of password hashes without knowi...

Google Chrome URL Replacement

The vulnerability of the CustomButton::AcceleratorPressed function in the ui/views/controls/button/custombutton.cc file of Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to replace URLs through unauthorized actions involving...

Google Chrome Source Replacement

The vulnerability of the Omnibox browser implementation by Google Chrome is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to remotely replace the source of the document...

Google Chrome Access Restriction Bypass

The vulnerability of the Blink component in Google Chrome browser is related to security configuration errors. Exploiting this vulnerability could allow a malicious actor to bypass existing access control policies...

Firefox Bypass Access Restrictions

The vulnerability of the js/src/proxy/Proxy.cpp component of the Firefox browser is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to bypass access restrictions to window elements by using a specially crafted web page...

Firefox Content Replacement

The vulnerability of Firefox browsers is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to replace the window’s content using a specially crafted web page...

iOS Sender Address Spoofing

The vulnerability of the Mail component in the iOS operating system is related to security configuration errors. Exploiting this vulnerability allows a malicious actor to use contacts in the address book to replace the sender’s address in emails sent from the device...