Chrome V8 JavaScript Engine Remote Code Execution

/ BSD 2-Clause License Copyright c 2021, rajvardhan agarwal All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: 1. Redistributions of source code must retain the above copyright notice,...

PT-2021-2804

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.93 Microsoft Edge affected versions not specified Description The issue is related to a type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can potentially...

DEBIAN-CVE-2021-21195

Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-21195

Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

PT-2021-4554

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 91.0.4472.77 Description The issue is related to an out of bounds read in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker using a crafted HTML page. This could potentially...

Google Chrome Resource Management Error Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google. A post-release reuse vulnerability exists in V8 in versions prior to Google Chrome 89.0.4389.114. A programmed attacker can exploit this vulnerability to cause heap damage via a crafted HTML page...

Node.js: Unexpected input validation of octal literals in nodejs v15.12.0 and below returns defined values for all undefined octal literals.

Summary: Unexpected input validation of octal literals in the nodejs implementation of V8 JavaScript engine V8 9.0.257.13 and below returns defined values for all undefined octal literals where otherwise should return undefined. Input data 08, 09... 078, 079 should return undefined, as evinced by...

Google Chrome V8 Engine Heap Buffer Overflow DoS

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to gain access to sensitive data, compromise its integrity, and cause service failures...

PT-2021-2805

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.85 Microsoft Edge affected versions not specified Description The issue is related to a heap buffer overflow in the V8 JavaScript engine handler, which can be exploited by a remote attacker to execute...

JerryScript suffers from a denial of service vulnerability (CNVD-2021-25990)

JerryScript is a lightweight JavaScript engine . A denial of service vulnerability exists in JerryScript, which can be exploited by an attacker to cause a denial of service...

JerryScript suffers from a denial of service vulnerability (CNVD-2021-25987)

JerryScript is a lightweight JavaScript engine . A denial of service vulnerability exists in JerryScript, which can be exploited by an attacker to cause a denial of service...

JerryScript has a binary vulnerability (CNVD-2021-25983)

JerryScript is a lightweight JavaScript engine . A binary vulnerability exists in JerryScript, which can be exploited by attackers to cause a denial of service...

JerryScript suffers from a denial of service vulnerability (CNVD-2021-25995)

JerryScript is a lightweight JavaScript engine . A denial of service vulnerability exists in JerryScript, which can be exploited by an attacker to cause a denial of service...

JerryScript suffers from a denial of service vulnerability (CNVD-2021-25997)

JerryScript is a lightweight JavaScript engine . A denial of service vulnerability exists in JerryScript, which can be exploited by an attacker to cause a denial of service...

JerryScript suffers from a denial of service vulnerability (CNVD-2021-26018)

JerryScript is a lightweight JavaScript engine . A denial of service vulnerability exists in JerryScript, which can be exploited by an attacker to cause a denial of service...

JerryScript suffers from a denial of service vulnerability (CNVD-2021-25996)

JerryScript is a lightweight JavaScript engine . A denial of service vulnerability exists in JerryScript, which can be exploited by an attacker to cause a denial of service...

JerryScript suffers from a denial of service vulnerability (CNVD-2021-25986)

JerryScript is a lightweight JavaScript engine . A denial of service vulnerability exists in JerryScript, which can be exploited by an attacker to cause a denial of service...

serenity:FuzzJs: Heap-use-after-free in AK::NonnullOwnPtr<JS::IndexedPropertyStorage>::operator->

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6460237453328384 Project: serenity Fuzzing Engine: honggfuzz Fuzz Target: FuzzJs Job Type: honggfuzzasanserenity Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address:...

CVE-2021-23987

Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects...

CVE-2021-23982

Using techniques that built on the slipstream research, a malicious webpage could have scanned both an internal network's hosts as well as services running on the user's local machine utilizing WebRTC connections. This vulnerability affects Firefox ESR 78.9, Firefox 87, and Thunderbird 78.9...