Lucene search
+L

4178 matches found

CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•26 views

Microsoft Edge resource management error vulnerabilities

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome DevTools. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

8.8CVSS7.8AI score0.01233EPSS
SaveExploits1References14
Kaspersky
Kaspersky
•added 2021/07/20 12:00 a.m.•424 views

KLA12236 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to bypass security restrictions, execute arbitrary code, cause denial of service, spoof user interface, obtain sensitive information, perform cross-site scripting attack. Below is a complete li...

9.6CVSS7.1AI score0.06282EPSS
SaveExploits28References4
Positive Technologies
Positive Technologies
•added 2021/07/20 12:00 a.m.•3 views

PT-2021-3672

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107 Description The issue is related to a use after free in DevTools, which could allow an attacker to potentially exploit heap corruption via a crafted HTML page if a user is convinced to install a...

8.8CVSS0.01233EPSS
SaveExploits1
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•17 views

Microsoft Edge resource management error vulnerabilities

Chrome is a web browsing tool developed by Google, and a post-release reuse vulnerability exists in DevTools in versions prior to Google Chrome 92.0.4515.107. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash...

8.8CVSS8.2AI score0.01156EPSS
SaveExploits1References14
CNNVD
CNNVD
•added 2021/07/20 12:00 a.m.•28 views

Microsoft Edge resource management error vulnerabilities

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in DevTools in versions of Google Chrome prior to 92.0.4515.107. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

8.8CVSS7.8AI score0.01233EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
•added 2021/07/20 12:00 a.m.•3 views

PT-2021-3654

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107 Description The issue is related to insufficient policy enforcement in DevTools, which could allow an attacker to potentially perform a sandbox escape via a crafted HTML page if a user installs a...

9.6CVSS0.01189EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2021/07/20 12:00 a.m.•1 views

PT-2021-3716

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107 Description The issue is related to a use after free in DevTools, which could allow an attacker to potentially exploit heap corruption via a crafted HTML page if a user is convinced to install a...

8.8CVSS0.01233EPSS
SaveExploits1
osv_opensuse
osv_opensuse
•added 2021/07/05 8:13 p.m.•18 views

OPENSUSE-SU-2021:0973-1 Security update for libqt5-qtwebengine

This update for libqt5-qtwebengine fixes the following issues: Update to version 5.15.3 CVE fixes backported in chromium updates: - CVE-2020-16044: Use after free in WebRTC - CVE-2021-21118: Heap buffer overflow in Blink - CVE-2021-21119: Use after free in Media - CVE-2021-21120: Use after free i...

9.6CVSS7.8AI score0.23406EPSS
SaveExploits8References35
Positive Technologies
Positive Technologies
•added 2021/05/25 12:00 a.m.•17 views

PT-2021-7874 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 91.0.4472.77 Description: The issue is related to a use after free in DevTools, which allowed an attacker to execute arbitrary code via a crafted Chrome Extension if a user was convinced to install a malicious...

10CVSS7.8AI score0.38573EPSS
SaveExploits43References319
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2021/05/25 12:00 a.m.•88 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 91 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 91.0.4472.77 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

8.8CVSS7.4AI score0.16742EPSS
SaveExploits24Affected Software1
Positive Technologies
Positive Technologies
•added 2021/05/20 12:00 a.m.•2 views

PT-2021-3640

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107 Description The issue is related to a use after free in DevTools, which could allow an attacker to potentially exploit heap corruption via specific user gestures if the user is convinced to open...

10CVSS0.01156EPSS
SaveExploits1
attackerkb
attackerkb
•added 2021/04/30 9:15 p.m.•14 views

CVE-2021-21232

Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01104EPSS
SaveExploits0References11
osv_ubuntu
osv_ubuntu
•added 2021/04/30 9:15 p.m.•14 views

UBUNTU-CVE-2021-21232

Use after free in Dev Tools in Google Chrome prior to 90.0.4430.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01104EPSS
SaveExploits0References2
Gitee
Gitee
•added 2021/04/22 12:40 p.m.•18 views

Hack-Tools

This is an offensive tool for Web Pentesters. It is a browser extension called HackTools, which facilitates web application penetration tests. The extension includes cheat sheets and tools such as XSS payloads, reverse shells, and more, accessible in one click. It can be used in pop-up mode or in...

6.5AI score
SaveExploits0
osv_cve
osv_cve
•added 2021/03/31 2:15 p.m.•14 views

CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

6.5CVSS7.1AI score0.01506EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/03/31 2:15 p.m.•12 views

CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

6.5CVSS6.8AI score0.01506EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2021/03/31 1:41 p.m.•132 views

CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

6.5CVSS6.8AI score0.01506EPSS
SaveExploits0
Cvelist
Cvelist
•added 2021/03/31 1:41 p.m.•54 views

CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

6.9AI score0.01506EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2021/03/31 1:41 p.m.•78 views

CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

6.5CVSS8AI score0.01506EPSS
SaveExploits0
Mend
Mend
•added 2021/03/31 1:41 p.m.•6 views

CVE-2021-23985

If an attacker is able to alter specific about:config values for example malware running on the user's computer, the Devtools remote debugging feature could have been enabled in a way that was unnoticable to the user. This would have allowed a remote attacker able to make a direct network...

7.1CVSS0.01506EPSS
SaveExploits0References5
Rows per page
Query Builder