webkitgtk: Memory corruption leading to arbitrary code execution

A flaw was found in the webkitgtk package. Affected versions of this package could allow a remote attacker to execute arbitrary code on the system caused by memory corruption in the WebKit component. By persuading a victim to visit a specially crafted Web site, an attacker could exploit this...

webkitgtk: Buffer overflow leading to arbitrary code execution

A flaw was found in the webkitgtk package. Affected versions of this package are vulnerable to a buffer overflow caused by improper bounds checking by the WebKit component. By persuading a victim to visit a specially crafted Web site, a remote attacker could overflow a buffer and execute arbitrar...

USN-4546-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, conduct cross-site scripting XSS attacks, spoof the site displayed in the download dialog, or execute...

PT-2020-4021 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the WinINet API component of the Windows operating system and involves insecure privilege management. Exploitation of this issue could allow a remote attacker to...

PT-2020-4020 · Microsoft · Windows +1

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to insecure privilege management in the WinINet API component of the Windows operating system. Exploitation of this issue could allow a remote attacker to elevate their...

CVE-2020-1555

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsoft Edge HTML-based. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who...

Microsoft Internet Explorer Remote Code Execution Vulnerability (CNVD-2020-51778)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from the American company Microsoft. A remote code execution vulnerability exists in the way the Scripting Engine handles memory in Microsoft IE version 11. The vulnerability stems from an improperly...

Microsoft Edge Remote Code Execution Vulnerability (CNVD-2020-61587)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from a remote code execution vulnerability that stems from the program's failure to properly handle objects in memory. An attacker can exploit the vulnerability by...

PT-2020-3764 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge affected versions not specified Description: A remote code execution issue exists due to improper access of objects in memory. This could allow an attacker to execute arbitrary code in the context of the current user, potential...

PT-2020-3703 · Microsoft · Edge

Name of the Vulnerable Software and Affected Versions: Microsoft Edge HTML-based affected versions not specified Description: A remote code execution issue exists due to the way the scripting engine handles objects in memory. This could allow an attacker to corrupt memory and execute arbitrary co...

Cisco Webex Meetings Desktop App Input Validation Error Vulnerability (CNVD-2020-45577)

Cisco Webex Meetings Desktop App is a video conferencing control application for use in desktop environments from Cisco USA. An input validation error vulnerability exists in the user interface of the Cisco Webex Meetings Desktop App versions prior to 39.5.24, 40.4.6, and 40.6, which arises from...

CVE-2019-20841

An issue was discovered in Mattermost Server before 5.18.0, 5.17.2, 5.16.4, 5.15.4, and 5.9.7. CSRF can sometimes occur via a crafted web site for account takeover attacks...

Google Chrome WebView Security Bypass Vulnerability

Google Chrome is a Web browser from Google, and WebView is a Webkit-based control for displaying Web pages. A security vulnerability exists in WebView in Google Chrome versions prior to 83.0.4103.106. The vulnerability can be exploited by an attacker to bypass security restrictions with the help ...

Google Chrome V8 Buffer Overflow Vulnerability (CNVD-2020-49890)

Google Chrome is a web browser of Google Google, U.S. V8 is one of the open source JavaScript engine. A buffer overflow vulnerability exists in V8 in versions prior to Google Chrome 83.0.4103.106. An attacker can exploit this vulnerability to execute arbitrary code on a system with the help of a...

VBScript Remote Code Execution Vulnerability (CNVD-2020-35937)

Microsoft Internet Explorer IE is a Web browser that comes with the Windows operating system from Microsoft Corporation.VBScript Engine is one of the VBScript scripting language engines. A remote code execution vulnerability exists in the way memory objects are handled in the VBScript Engine in...

Google Chrome Security Bypass Vulnerability (CNVD-2020-29298)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome prior to version 83.0.4103.61, which stems from the program's failure to fully enforce policies. The vulnerability can be exploited by an attacker to bypass security restrictions with...

Google Chrome Security Bypass Vulnerability (CNVD-2020-29232)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in media router in Google Chrome versions prior to 83.0.4103.61, which stems from the program failing to adequately validate data. The vulnerability can be exploited by an attacker to bypass security...

Google Chrome WebRTC Resource Management Error Vulnerability (CNVD-2020-29311)

Google Chrome is a web browser from Google, an American company. A resource management error vulnerability exists in WebRTC in versions of Google Chrome prior to 83.0.4103.61. An attacker can exploit the vulnerability to execute arbitrary code with the help of a specially crafted website...

Google Chrome Security Bypass Vulnerability (CNVD-2020-29233)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in ChromeDriver in versions prior to Google Chrome 83.0.4103.61, which stems from the program failing to adequately validate data. The vulnerability can be exploited by an attacker to bypass security...

Google Chrome Security Bypass Vulnerability (CNVD-2020-29297)

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in Google Chrome versions prior to 83.0.4103.61, which formats URLs in a way that the program does not fully implement policies. The vulnerability can be exploited by an attacker to bypass security...