Google Chrome PDFium Resource Management Error Vulnerability (CNVD-2019-26396)

Google Chrome is the United States Google Google company's a Web browser. PDFium is one of the open source PDF rendering engine. A resource management error vulnerability exists in PDFium in versions of Google Chrome prior to 76.0.3809.87. An attacker can exploit this vulnerability by tricking a...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

Google Chrome Information Disclosure Vulnerability (CNVD-2019-21123)

Google Chrome is a web browser from Google, and Service Workers is one of the components that provides offline support for web applications. A security vulnerability exists in Service Workers in Google Chrome versions prior to 68.0.3440.75. A remote attacker can exploit the vulnerability to obtai...

Mozilla Firefox and Firefox ESR Security Bypass Vulnerability (CNVD-2019-19289)

Mozilla Firefox and Mozilla Firefox ESR are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox web browser. A security vulnerability exists in Mozilla Firefox versions prior to 67.0.4 and...

USN-4020-1 firefox vulnerability

A type confusion bug was discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could exploit this by causing a denial of service, or executing arbitrary code...

CVE-2019-1038

A remote code execution vulnerability exists in the way that Microsoft browsers access objects in memory. The vulnerability could corrupt memory in a way that could allow an attacker to execute arbitrary code in the context of the current user. An attacker who successfully exploited the...

CVE-2019-1043

A remote code execution vulnerability exists in the way that comctl32.dll handles objects in memory. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploited the vulnerability coul...

CVE-2019-0988

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

CVE-2019-0888

A remote code execution vulnerability exists in the way that ActiveX Data Objects ADO handle objects in memory. An attacker who successfully exploited the vulnerability could execute arbitrary code with the victim user’s privileges. An attacker could craft a website that exploits the vulnerabilit...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully exploit...

Mozilla Firefox Spoofing Vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 67. The vulnerability can be exploited by an attacker to spoof the contents of the address bar by tricking a user into visiting a...

Google Chrome Media Player Out-of-Bounds Access Vulnerability

Google Chrome is a web browser from Google, an American company. A security vulnerability exists in the media player in versions prior to Google Chrome 74.0.3729.131. An attacker can exploit this vulnerability by tricking a user into visiting a specially crafted website to bypass security...

Google Chrome Omnibox Read Out-of-Bounds Vulnerability

Google Chrome is a web browser from Google, Inc. and Omnibox is a real-time search engine. A security vulnerability exists in Omnibox in versions of Google Chrome prior to 74.0.3729.108. An attacker can exploit this vulnerability by tricking users into visiting a specially crafted website with a...

Google Chrome Developer Tools Incorrect Escape Vulnerability

Google Chrome is a web browser from Google, and Developer Tools is one of the developer tools components. A security vulnerability exists in Developer Tools in Google Chrome versions prior to 74.0.3729.108. The vulnerability can be exploited by an attacker to bypass security restrictions and gain...

Scripting Engine Memory Corruption Vulnerability

A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Internet Explorer. The vulnerability could corrupt memory in such a way that an attacker could execute arbitrary code in the context of the current user. An attacker who successfully...

USN-3927-1 thunderbird vulnerabilities

It was discovered that Thunderbird allowed PAC files to specify that requests to localhost are sent through the proxy to another server. If proxy auto-detection is enabled, an attacker could potentially exploit this to conduct attacks on local services and tools. CVE-2018-18506 Multiple security...

Nouveau Denial of Service Vulnerability

Nouveau is an open source graphics card driver. A denial of service vulnerability exists in Nouveau NV117 version Ubuntu 18.04 LTS release. A remote attacker can exploit this vulnerability to cause a denial of service with the help of a specially crafted website...

Nouveau Display Driver Remote Denial of Service

Summary A remote denial-of-service vulnerability exists in the way the Nouveau display driver the default Ubuntu Nvidia display driver handles GPU shader execution. A specially crafted pixel shader can cause remote denial-of-service issues. An attacker can provide a specially crafted website to...

USN-3918-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, denial of service via successive FTP authorization prompts or modal alerts, trick...