Lucene search
+L

714 matches found

BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.7 views

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted HTML page...

9.3CVSS8.2AI score0.01312EPSS
Exploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/03/16 12:0 a.m.8 views

The vulnerability in the interface for supporting streaming audio and video data from the Media Streams API in browsers like Google Chrome and Microsoft Edge allows a attacker to execute arbitrary code on the target system.

The vulnerability of the Media Streams API interface for handling streaming audio and video data in Google Chrome and Microsoft Edge browsers is related to buffer overflows in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system...

9.3CVSS8.5AI score0.015EPSS
Exploits1References14Affected Software7
OSV
OSV
added 2022/02/12 2:15 a.m.6 views

DEBIAN-CVE-2022-0293

Use after free in Web packaging in Google Chrome prior to 97.0.4692.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.0075EPSS
Exploits0References1
OSV
OSV
added 2022/02/12 2:15 a.m.4 views

UBUNTU-CVE-2022-0300

Use after free in Text Input Method Editor in Google Chrome on Android prior to 97.0.4692.99 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.0075EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2022/02/12 12:15 a.m.7 views

CVE-2022-0106

Use after free in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.8AI score0.01305EPSS
Exploits1References9
ATTACKERKB
ATTACKERKB
added 2022/02/12 12:15 a.m.6 views

CVE-2022-0111

Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set origin via a crafted HTML page...

6.5CVSS7.2AI score0.00793EPSS
Exploits1References9
OSV
OSV
added 2022/02/12 12:15 a.m.0 views

DEBIAN-CVE-2022-0106

Use after free in Autofill in Google Chrome prior to 97.0.4692.71 allowed a remote attacker who convinced a user to perform specific user gesture to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.01305EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/02/01 12:0 a.m.4 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in versions of Google Chrome prior to 98.0.4758.80. A remote attacker could exploit the vulnerability to exploit heap corruption via a carefully crafted HTML page...

8.8CVSS8.4AI score0.00761EPSS
Exploits0References11
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:0 a.m.9 views

The vulnerability of Google Chrome’s WebAudio component allows a hacker to circumvent existing security restrictions by using a specially created HTML page.

The vulnerability of Google Chrome’s WebAudio component relates to reading beyond the buffer limit in memory. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions through a specially created HTML page...

8.8CVSS7.8AI score0.00926EPSS
Exploits0References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:0 a.m.7 views

The vulnerability of the Profiles component in the Google Chrome browser allows attackers to redirect users to malicious web pages.

The vulnerability of the Profiles component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to redirect users to a malicious web page using a specially created HTML page...

9.3CVSS7.5AI score0.00827EPSS
Exploits0References9Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:0 a.m.8 views

The vulnerability of Google Chrome’s user interface allows a hacker to bypass existing security restrictions by using a specially created HTML page.

The vulnerability of Google Chrome’s user interface is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions by using a specially created HTML page...

4.3CVSS6.7AI score0.01174EPSS
Exploits1References7Affected Software6
ATTACKERKB
ATTACKERKB
added 2021/12/23 1:15 a.m.9 views

CVE-2021-4057

Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.8AI score0.02073EPSS
Exploits0References8
ATTACKERKB
ATTACKERKB
added 2021/12/23 1:15 a.m.8 views

CVE-2021-4059

Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.2AI score0.01265EPSS
Exploits0References7
ATTACKERKB
ATTACKERKB
added 2021/12/23 1:15 a.m.4 views

CVE-2021-38018

Inappropriate implementation in navigation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to perform domain spoofing via a crafted HTML page...

6.5CVSS6.9AI score0.00783EPSS
Exploits0References6
OSV
OSV
added 2021/12/23 1:15 a.m.2 views

DEBIAN-CVE-2021-38020

Insufficient policy enforcement in contacts picker in Google Chrome on Android prior to 96.0.4664.45 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

4.3CVSS6.4AI score0.00674EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2021/12/16 12:0 a.m.6 views

The vulnerability of the Google Chrome browser’s WebUI user interface allows a hacker to circumvent existing access restrictions.

The vulnerability in the user interface of Google Chrome’s WebUI exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to circumvent existing access restrictions by using a specially created HTML page...

7.8CVSS7.3AI score0.00286EPSS
Exploits0References10Affected Software6
OSV
OSV
added 2021/11/23 10:15 p.m.2 views

DEBIAN-CVE-2021-38001

Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.26703EPSS
Exploits1References1
OSV
OSV
added 2021/11/02 9:15 p.m.2 views

DEBIAN-CVE-2021-37979

heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.3AI score0.01711EPSS
Exploits1References1
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.7 views

The vulnerability of the Content Security Policy component in the Google Chrome web browser, related to improper authorization, allows attackers to compromise data integrity.

The vulnerability of the Content Security Policy component in the Google Chrome web browser is related to insufficient implementation of policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

4.3CVSS6.6AI score0.15728EPSS
Exploits1References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/10/27 12:0 a.m.5 views

The vulnerability of the user interface of Google Chrome’s web UI, related to the use of memory after it is released, allows a perpetrator to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the user interface of Google Chrome’s web UI is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions through a specially created HTML...

8.8CVSS7.6AI score0.00962EPSS
Exploits1References11Affected Software5
Rows per page
Query Builder