Lucene search
K

5 matches found

BDU FSTEC
BDU FSTEC
added 2016/06/17 12:0 a.m.3 views

The vulnerability of Google Chrome browser allows a violator to circumvent existing access restrictions policies.

The vulnerability of the extensions/renderer/resources/binding.js component in Google Chrome’s browser-based bindings extensions is related to the improper use of prototypes. Exploiting this vulnerability could allow a malicious actor to bypass existing access control policies...

6.8CVSS0.01485EPSS
Exploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/06/17 12:0 a.m.2 views

The vulnerability of Google Chrome browser allows a perpetrator to trigger a service failure or cause other effects.

The vulnerability of the extensions/renderer/runtimecustombindings.cc component in Google Chrome relates to the omission of additional effects during the creation of arrays. Exploiting this vulnerability may allow a malicious actor to cause a service failure the inability to use a resource after ...

5.1CVSS0.01991EPSS
Exploits0References4Affected Software1
RedHat Linux
RedHat Linux
added 2016/06/01 10:50 a.m.2 views

chromium-browser: cross-origin bypass in extension bindings

The ModuleSystem::RequireForJsInner function in extensions/renderer/modulesystem.cc in the extension bindings in Google Chrome before 51.0.2704.63 mishandles properties, which allows remote attackers to conduct bindings-interception attacks and bypass the Same Origin Policy via unspecified vector...

8.8CVSS7.4AI score0.01485EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2016/03/07 3:22 a.m.4 views

chromium-browser: WebAPI Bypass

extensions/renderer/resources/platformapp.js in the Extensions subsystem in Google Chrome before 49.0.2623.75 does not properly restrict use of Web APIs, which allows remote attackers to bypass intended access restrictions via a crafted platform app...

6.8CVSS7.4AI score0.00765EPSS
Exploits0References5
CNVD
CNVD
added 2015/07/24 12:0 a.m.1 views

Google Chrome Cross-Site Scripting Vulnerability (CNVD-2015-04884)

Google Chrome is a web browser developed by the American company Google Google. A cross-site scripting vulnerability exists in the 'V8ContextNativeHandler:: V8ContextNativeHandler:: GetModuleSystem' function in the extensions/renderer/v8contextnativehandler.cc file in Google Chrome versions prior...

4.3CVSS8.2AI score0.00687EPSS
Exploits0References1
Rows per page
Query Builder