CVE-2020-12415

When "%2F" was present in a manifest URL, Firefox's AppCache behavior may have become confused and allowed a manifest to be served from a subdirectory. This could cause the appcache to be used to service requests for the top level directory. This vulnerability affects Firefox 78...

CVE-2020-12420

When trying to connect to a STUN server, a race condition could have caused a use-after-free of a pointer, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox ESR 68.10, Firefox 78, and Thunderbird 68.10.0...

chromium-browser: Out of bounds write in V8

Out of bounds write in V8 in Google Chrome prior to 83.0.4103.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Memory Corruption Vulnerability in ChakraCore

ChakraCore is the core part of an open source ChakraJavaScript scripting engine used in the Edge browser or as a separate JavaScript engine . A memory corruption vulnerability exists in ChakraCore, which can be exploited by attackers to cause a denial of service...

chromium-browser: Type Confusion in V8

Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Fedora: Security Advisory for mozjs68 (FEDORA-2020-4334da4020)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome V8 Buffer Overflow Vulnerability (CNVD-2020-32316)

Google Chrome is a web browser of Google Google, U.S. V8 is one of the open source JavaScript engine. A buffer overflow vulnerability exists in V8 in versions of Google Chrome prior to 81.0.4044.92. A remote attacker can exploit this vulnerability to cause heap corruption with the help of special...

Google Chrome V8 Information Disclosure Vulnerability (CNVD-2020-32315)

Google Chrome is a web browser of Google Google, U.S. V8 is one of the open source JavaScript engine. A security vulnerability exists in V8 in versions of Google Chrome prior to 14.0.0.0, which stems from the program failing to fully enforce policies. The vulnerability can be exploited by a remot...

Google Chrome V8 Buffer Overflow Vulnerability (CNVD-2020-32317)

Google Chrome is a web browser of Google Google, U.S. V8 is one of the open source JavaScript engine. A security vulnerability exists in V8 in versions of Google Chrome prior to 80.0.3987.162. A remote attacker can exploit this vulnerability to cause heap corruption with the help of specially...

UBUNTU-CVE-2020-6419

Out of bounds write in V8 in Google Chrome prior to 81.0.4044.92 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

CVE-2020-12409

When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL. This vulnerability affects Firefox 77...

CVE-2020-12408

When browsing a document hosted on an IP address, an attacker could insert certain characters to flip domain and path information in the address bar. This vulnerability affects Firefox 77...

CVE-2020-12407

Mozilla Developer Nicolas Silva found that when using WebRender, Firefox would under certain conditions leak arbitrary GPU memory to the visible screen. The leaked memory content was visible to the user, but not observable from web content. This vulnerability affects Firefox 77...

PT-2020-5792

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 83.0.4103.106 Description: The issue is related to an out of bounds write in the V8 JavaScript engine of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. Th...

CVE-2020-12388

The Firefox content processes did not sufficiently lockdown access control which could result in a sandbox escape. Note: this issue only affects Firefox on Windows operating systems.. This vulnerability affects Firefox ESR 68.8 and Firefox 76...

CVE-2020-6463

Use after free in ANGLE in Google Chrome prior to 81.0.4044.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

PT-2020-3429

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61 Description The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could enable the...

CVE-2020-12396

Mozilla developers and community members reported memory safety bugs present in Firefox 75. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 76...

Google Chrome V8 Heap Buffer Overflow DoS

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to incorrect implementation of the engine. Exploiting this vulnerability can allow a malicious actor to cause service failures...

V8 Component Data Compromise

The vulnerability of Google Chrome’s V8 component relates to access to data without type control. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to confidential data, cause service failures, or compromise data integrity through a specially created HTML page...