Lucene search
+L

1858 matches found

Snyk
Snyk
•added 2022/05/14 2:23 a.m.•12 views

Out-of-Bounds

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Out-of-Bounds when visiting a crafted website. An attacker can execute arbitrary code via the Chakra JavaScript engine in Microsoft Edge...

7.6CVSS7.7AI score0.14871EPSS
SaveExploits0References2
Snyk
Snyk
•added 2022/05/14 2:23 a.m.•12 views

Out-of-Bounds

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Out-of-Bounds via the Chakra JavaScript engine in Microsoft Edge. An attacker can execute arbitrary code or cause a denial of service memory...

7.6CVSS7.5AI score0.1532EPSS
SaveExploits0References2
Snyk
Snyk
•added 2022/05/14 2:23 a.m.•6 views

Out-of-Bounds

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Out-of-Bounds via the Chakra JavaScript engine in Microsoft Edge. An attacker can execute arbitrary code or cause a denial of service memory...

9.3CVSS7.8AI score0.41323EPSS
SaveExploits1References2
Snyk
Snyk
•added 2022/05/14 2:23 a.m.•12 views

Out-of-Bounds

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Out-of-Bounds via the Chakra JavaScript engine in Microsoft Edge. An attacker can execute arbitrary code or cause a denial of service memory...

7.6CVSS7.5AI score0.16843EPSS
SaveExploits0References2
Snyk
Snyk
•added 2022/05/14 2:22 a.m.•9 views

Arbitrary Code Execution

Overview Microsoft.ChakraCore is a core part of the Chakra Javascript engine that powers Microsoft Edge Affected versions of this package are vulnerable to Arbitrary Code Execution or cause denial of service via a crafted web site. Remediation Upgrade Microsoft.ChakraCore to version 1.2.2 or...

7.6CVSS7AI score0.66469EPSS
SaveExploits2References2
BDU FSTEC
BDU FSTEC
•added 2022/05/13 12:00 a.m.•14 views

Vulnerability of the screen-sharing function in Google Chrome and Microsoft Edge browsers, allowing a hacker to execute arbitrary code

The vulnerability of the screen-sharing function in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code remotely...

10CVSS8.5AI score0.01026EPSS
SaveExploits1References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/05/05 12:00 a.m.•18 views

The vulnerability of the display mechanism of Blink web pages in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of the Blink web page display mechanism in Microsoft Edge and Google Chrome exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

6.4CVSS7AI score0.00816EPSS
SaveExploits1References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/05/05 12:00 a.m.•17 views

The vulnerability of the “Bookmarks” control in Microsoft Edge and Google Chrome browsers allows a hacker to disclose protected information.

The vulnerability of the “Bookmarks” control element in Microsoft Edge and Google Chrome is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

7.8CVSS7.8AI score0.00892EPSS
SaveExploits1References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/05/05 12:00 a.m.•15 views

The vulnerability in the Browser Switcher extensions of Microsoft Edge and Google Chrome allows a hacker to disclose protected information.

The vulnerability of the Browser Switcher extension in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this extension...

7.8CVSS7.9AI score0.0091EPSS
SaveExploits1References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/05/05 12:00 a.m.•16 views

The vulnerability in the set of tools for web development, DevTools, in Microsoft Edge and Google Chrome browsers allows a hacker to expose protected information.

The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

3.1CVSS6.7AI score0.00766EPSS
SaveExploits0References5Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/05/05 12:00 a.m.•20 views

The vulnerability in the isolated environment of Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability in the isolated environment of Microsoft Edge and Google Chrome browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

3.1CVSS7AI score0.00878EPSS
SaveExploits1References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/05/05 12:00 a.m.•20 views

Vulnerability of the browser loading functions of Microsoft Edge and Google Chrome, allowing attackers to disclose protected information

The vulnerability of the browser loading functions in Microsoft Edge and Google Chrome is related to errors in the process of revealing information through the executed source code. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

6.4CVSS6.6AI score0.00701EPSS
SaveExploits1References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/05/05 12:00 a.m.•18 views

The vulnerability of the user authentication mechanism of WebAuthentication browsers Microsoft Edge and Google Chrome allows a perpetrator to disclose protected information.

The vulnerability of the WebAuthentication user authentication mechanism for Microsoft Edge and Google Chrome is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information...

3.1CVSS7.1AI score0.00772EPSS
SaveExploits1References6Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/05/05 12:00 a.m.•16 views

The vulnerability of the Trusted Types component in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of Trusted Types in Microsoft Edge and Google Chrome browsers exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

6.4CVSS6.6AI score0.00821EPSS
SaveExploits1References6Affected Software5
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•9 views

PT-2022-6716 · Microsoft · Edge +1

Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to insufficient input validation in the Internet Explorer IE mode of Microsoft Edge, which can be exploited by a remote attacker to conduct spoofi...

3.1CVSS4.8AI score0.00609EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2022/04/11 12:00 a.m.•16 views

The vulnerability of Microsoft Edge browser, related to information representation errors in the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of Microsoft Edge relates to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

5CVSS6.5AI score0.01361EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2022/04/07 12:00 a.m.•20 views

The vulnerability of the Web Cursor component in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Web Cursor component in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a...

9.4CVSS6.8AI score0.00908EPSS
SaveExploits1References7Affected Software4
BDU FSTEC
BDU FSTEC
•added 2022/04/07 12:00 a.m.•14 views

The vulnerability of the user interface of the WebUI on Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to the overflow of buffers in the dynamic memory during the processing of HTML content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web pag...

7.6CVSS7.6AI score0.00886EPSS
SaveExploits0References9Affected Software6
BDU FSTEC
BDU FSTEC
•added 2022/04/07 12:00 a.m.•16 views

The vulnerability of the Resource Timing API interface in Google Chrome and Microsoft Edge browsers is related, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Resource Timing API interface in Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

3.1CVSS6.8AI score0.00916EPSS
SaveExploits1References10Affected Software5
BDU FSTEC
BDU FSTEC
•added 2022/04/07 12:00 a.m.•20 views

The vulnerability of the software interface of the Background Fetch API in Google Chrome and Microsoft Edge browsers allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Background Fetch API programming interface in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected...

9.4CVSS6.8AI score0.00927EPSS
SaveExploits1References10Affected Software6
Rows per page
Query Builder