JSONPointer security vulnerability

jsonpointer is an open source package for simple JSON addressing. jsonpointer suffers from a security vulnerability that stems from improper design or implementation during the development of code for a web-based system or product. No details of the vulnerability are currently available...

Deoxxa dotty security vulnerability

Deoxxa Dotty is a Javascript-based code base used by Deoxxa individual developers to support access to object properties. deoxxa dotty has a security vulnerability that stems from a design or implementation impropriety in the code development process of a web-based system or product. No details o...

json-pointer security vulnerability

Json-Pointer is an open source, Rfc 6901 described by Manuel Stofer, a Swiss individual developer of some utilities for Json pointers. json-pointer has a security vulnerability that stems from improper design or implementation during the code development of a web-based system or product. No...

Design/Logic Flaw

Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2021-37995

Inappropriate implementation in WebApp Installer in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially overlay and spoof the contents of the Omnibox URL bar via a crafted HTML page...

Design/Logic Flaw

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

CVE-2021-37980

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

CVE-2021-37990

Inappropriate implementation in WebView in Google Chrome on Android prior to 95.0.4638.54 allowed a remote attacker to leak cross-origin data via a crafted app...

CVE-2021-37989

CVE-2021-37989 is an issue in the Blink component of Google Chrome prior to 95.0.4638.54 . The problem is an inappropriate implementation that allows a remote attacker to abuse the Content Security Policy via a crafted HTML page. Impact is described as potential policy abuse with craftable conten...

CVE-2021-37980

Inappropriate implementation in Sandbox in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially bypass site isolation via Windows...

Naver Whale Browser security vulnerability

Naver Whale Browser is a web browser that supports user-defined interfaces from Naver, a South Korean company. A security vulnerability exists in Naver Whale Browser that arises from improper design or implementation during code development of a web system or product...

Google Chrome Content Security Policy Authorization

The vulnerability of the Content Security Policy mechanism in the Google Chrome web browser is related to insufficient implementation of policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

FreeBSD : chromium -- multiple vulnerabilities (976d7bf9-38ea-11ec-b3b0-3065ec8fd3ec)

Chrome Releases reports : This release contains 8 security fixes, including : - 1259864 High CVE-2021-37997 : Use after free in Sign-In. Reported by Wei Yuan of MoyunSec VLab on 2021-10-14 - 1259587 High CVE-2021-37998 : Use after free in Garbage Collection. Reported by Cassidy Kim of Amber...

Unspecified vulnerability in Linux kernel (CNVD-2021-84584)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel powerpc prior to version 5.14.15, which stems from an implementation error in arch/powerpc/kvm/book3shvrmhandlers when handling...

OPENSUSE-SU-2021:1396-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 95.0.4638.54 boo1191844: CVE-2021-37981: Heap buffer overflow in Skia CVE-2021-37982: Use after free in Incognito CVE-2021-37983: Use after free in Dev Tools CVE-2021-37984: Heap buffer overflow in PDFium CVE-2021-37985: Use after free...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 8 security fixes, including: 1259864 High CVE-2021-37997 : Use after free in Sign-In. Reported by Wei Yuan of MoyunSec VLab on 2021-10-14 1259587 High CVE-2021-37998 : Use after free in Garbage Collection. Reported by Cassidy Kim of Amber Security La...

New insights on cybersecurity in the age of hybrid work

As we approach the last week of Cybersecurity Awareness Month, I think about what is top of mind for myself and my peers in security. The past year has continued the 2020s major shift in the way organizations operate. Recent data shows that 81 percent of enterprise organizations have begun the mo...

New insights on cybersecurity in the age of hybrid work

As we approach the last week of Cybersecurity Awareness Month, I think about what is top of mind for myself and my peers in security. The past year has continued the 2020s major shift in the way organizations operate. Recent data shows that 81 percent of enterprise organizations have begun the mo...

openSUSE 15 Security Update : chromium (openSUSE-SU-2021:1392-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1392-1 advisory. - : Heap buffer overflow in Skia. CVE-2021-37981 - : Use after free in Incognito. CVE-2021-37982 - : Use after free in Dev Tools...

Google Chrome iFrameSandbox Authorization

The vulnerability of the iFrameSandbox component in the Google Chrome web browser is related to insufficient implementation of policies. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...