Lucene search
+L

269 matches found

OSV
OSV
added 2021/03/09 6:15 p.m.4 views

UBUNTU-CVE-2021-21173

Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.3AI score0.01603EPSS
Exploits0References2
Debian CVE
Debian CVE
added 2021/03/09 5:46 p.m.34 views

CVE-2021-21179

Use after free in Network Internals in Google Chrome on Linux prior to 89.0.4389.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.5AI score0.01414EPSS
Exploits1
CVE
CVE
added 2021/03/09 5:46 p.m.198 views

CVE-2021-21179

CVE-2021-21179 affects Google Chrome/Chromium, specifically a use-after-free in the Network Internals component on Linux prior to version 89.0.4389.72, enabling potential heap corruption via a crafted HTML page. A patch is available by upgrading to Chrome/Chromium 89.0.4389.72 or newer (see refer...

8.8CVSS8.8AI score0.01414EPSS
Exploits1References7Affected Software1
CVE
CVE
added 2021/03/09 5:46 p.m.192 views

CVE-2021-21173

CVE-2021-21173 describes a side-channel information leakage in Google Chrome/Chromium’s Network Internals, allowing a remote attacker to leak cross-origin data via a crafted HTML page. Affected component: Network Internals in Chromium before version 89.0.4389.72. Root cause: side-channel informat...

6.5CVSS6.2AI score0.01603EPSS
Exploits0References7Affected Software1
Debian CVE
Debian CVE
added 2021/03/09 5:46 p.m.47 views

CVE-2021-21173

Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS7.1AI score0.01603EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2021/03/09 5:46 p.m.74 views

CVE-2021-21173

Side-channel information leakage in Network Internals in Google Chrome prior to 89.0.4389.72 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.5AI score0.01603EPSS
Exploits0
Veracode
Veracode
added 2021/03/09 2:26 p.m.18 views

Information Disclosure

chromium is vulnerable to information disclosure. The vulnerability exists through side-channel attacks in Network Internals, allowing cross-origin data to be leaked...

6.5CVSS2.4AI score0.01603EPSS
Exploits0References11Affected Software2
Veracode
Veracode
added 2021/03/09 2:26 p.m.16 views

Denial Of Service (DoS)

chromium is vulnerable to denial of service DoS. The vulnerability exists as the Network Internals component can cause a heap corruption through a use after free flaw when processing a HTML page...

8.8CVSS1.4AI score0.01414EPSS
Exploits1References11Affected Software2
Microsoft CVE
Microsoft CVE
added 2021/03/04 8:4 p.m.23 views

Chromium CVE-2021-21179: Use after free in Network Internals

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.01414EPSS
Exploits1
Microsoft CVE
Microsoft CVE
added 2021/03/04 8:4 p.m.26 views

Chromium CVE-2021-21173: Side-channel information leakage in Network Internals

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.2AI score0.01603EPSS
Exploits0
Kaspersky
Kaspersky
added 2021/03/04 12:0 a.m.48 views

KLA12107 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, bypass security restrictions, spoof user interface, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An...

8.8CVSS9.6AI score0.26525EPSS
Exploits24References36
CNVD
CNVD
added 2021/03/03 12:0 a.m.6 views

Google Chrome Network Internals Code Execution Vulnerability

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome Network Internals. A remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

8.8CVSS7.7AI score0.01414EPSS
Exploits1References1
CNNVD
CNNVD
added 2021/03/03 12:0 a.m.6 views

Google Chrome 安全漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A side-channel information disclosure vulnerability exists in Network Internals in versions of Google Chrome prior to 89.0.4389.72. An attacker can exploit this...

6.5CVSS8.3AI score0.01603EPSS
Exploits0References11
Kaspersky
Kaspersky
added 2021/03/02 12:0 a.m.477 views

KLA12106 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A heap buff...

8.8CVSS9.3AI score0.26525EPSS
Exploits25References4
NVD
NVD
added 2020/12/31 10:15 a.m.31 views

CVE-2020-35859

An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sensitive information, or guest programs can experience memory corruption...

9.1CVSS9AI score0.01505EPSS
Exploits0References1
Cvelist
Cvelist
added 2020/12/31 8:30 a.m.38 views

CVE-2020-35859

An issue was discovered in the lucet-runtime-internals crate before 0.5.1 for Rust. It mishandles sigstack allocation. Guest programs may be able to obtain sensitive information, or guest programs can experience memory corruption...

9.1AI score0.01505EPSS
Exploits0References1
CNNVD
CNNVD
added 2020/12/31 12:0 a.m.9 views

Rust lucet-runtime-internals crate security vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability exists in lucet-runtime-internals crate before 0.5.1 for Rust, which stems from incorrect handling of sigstack allocations. Client programs may be able to obtain sensitive information, o...

9.1CVSS5.8AI score0.01505EPSS
Exploits0References2
Ubuntu
Ubuntu
added 2020/11/17 5:31 p.m.62 views

USN-4636-1: LibVNCServer, Vino vulnerability

It was discovered that LibVNCServer incorrectly handled certain internals. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Vino package ships with a LibVNCServer source and all listed release...

7.5CVSS7.6AI score0.01613EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2020/11/04 1:14 a.m.8 views

kernel: out-of-bounds read in in vc_do_resize function in drivers/tty/vt/vt.c

A flaw was found in the Linux kernel’s virtual console resize functionality. An attacker with local access to virtual consoles can use the virtual console resizing code to gather kernel internal data structures...

6.1CVSS6.9AI score0.00413EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/11/04 12:53 a.m.7 views

kernel: out-of-bounds read in in vc_do_resize function in drivers/tty/vt/vt.c

A flaw was found in the Linux kernel’s virtual console resize functionality. An attacker with local access to virtual consoles can use the virtual console resizing code to gather kernel internal data structures...

6.1CVSS6.9AI score0.00413EPSS
Exploits0References4
Rows per page
Query Builder