5429 matches found
CVE-2020-6516
Policy bypass in CORS in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
CVE-2020-6511
Information leak in content security policy in Google Chrome prior to 84.0.4147.89 allowed a remote attacker to leak cross-origin data via a crafted HTML page...
PT-2020-5704
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to an information leak in the Content Security Policy component of Google Chrome, which can be exploited by a remote attacker to access confidential data. This can b...
PT-2020-5667
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to an inappropriate implementation in WebRTC, allowing an attacker in a privileged network position to leak cross-origin data via a crafted HTML page. It is also...
PT-2020-5698
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to side-channel information leakage in the scroll to text feature, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could potential...
PT-2020-6232
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 84.0.4147.89 Description The issue is related to a policy bypass in the CORS mechanism of Google Chrome, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This can enable the attacker...
chromium-browser: Insufficient data validation in loader
Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...
PT-2020-6197
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 87.0.4280.66 Firefox affected versions not specified Firefox ESR affected versions not specified Thunderbird affected versions not specified Description The issue is related to a data source confirmation error,...
CVE-2020-6490
Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...
CVE-2020-6490
Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...
UBUNTU-CVE-2020-6490
Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...
Input validation
Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...
CVE-2020-6490
Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...
CVE-2020-6490
Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...
CVE-2020-6490
CVE-2020-6490 affects Google Chrome/Chromium loaders prior to 83.0.4103.61, with insufficient data validation in the loader enabling a remote attacker who could write to disk to leak cross-origin data via a crafted HTML page. Upstream fixes are in Chrome/Chromium 83.0.4103.61 and newer; Debian an...
CVE-2020-6490
Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...
CVE-2020-6490
Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...
CVE-2020-6490: Exposure of Resource to Wrong Sphere
Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page...
PT-2020-3516
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 83.0.4103.61 Description The issue is related to insufficient data validation in the loader of Google Chrome, allowing a remote attacker to leak cross-origin data via a crafted HTML page. This could enable the...