Google Chrome for Mac, Windows and Linux Shared Worker Source Policy Bypass Vulnerability

Google Chrome for Mac, Windows and Linux is a web browser developed by Google for the Mac, Windows and Linux platforms.Shared Worker is one of the content sharing components of Google Chrome. A security vulnerability exists in Shared Worker in versions of Google Chrome prior to 64.0.3282.119 on...

Google Chrome Security Updates (stable-channel-update-for-desktop_24-2018-01) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

KLA11185 Multiple vulnerabilities in Google Chrome

Multiple serious vulnerabilities have been found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information and perform cross-site scripting attack. Below ...

PT-2017-4039

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 59 Description The issue is related to a shared worker created from a "data:" URL in one tab being shared by another tab with a different origin, which bypasses the same-origin policy. This allows a remote attacker to...

Google Chrome < 51.0.2704.103 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 51.0.2704.103. It is, therefore, affected by a vulnerability as referenced in the 201606stable-channel-update16 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to...

Google Chrome < 51.0.2704.103 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 51.0.2704.103. It is, therefore, affected by a vulnerability as referenced in the 201606stable-channel-update16 advisory. - Multiple unspecified vulnerabilities in Google Chrome before 51.0.2704.103 allow attackers to cau...

Mozilla Firefox 'WorkerPrivate::NotifyFeatures' Function Competition Condition Vulnerability

Mozilla Firefox is an open source web browser. A competitive condition vulnerability in the Mozilla Firefox 'WorkerPrivate::NotifyFeatures' function allows remote attackers to exploit incorrect interactions between shared worker and IndexedDB implementations to crash the application or execute...

Use-after-free with shared workers and IndexedDB — Mozilla

Security researcher Looben Yang discovered a use-after-free vulnerability when using a shared worker with IndexedDB due to a race condition with the worker. This results in a potentially exploitable crash that can be triggered through web content...

Mozilla: Use-after-free in XMLHttpRequest with shared workers (MFSA 2015-92)

Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute arbitrary code via a SharedWorker object that makes recursive calls to the open method of an XMLHttpRequest object...

Mozilla Firefox/Thunderbird XMLHttpRequest Memory Misreference Vulnerability

Mozilla Firefox is an open source web browser.Thunderbird is a mail application. A memory misreference vulnerability exists in Mozilla Firefox/Thunderbird when using XMLHttpRequest in conjunction with a shared or dedicated worker, which could be exploited by a remote attacker to construct a...

CVE-2015-2722

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker...

CVE-2015-2722: Undefined Security Weakness

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker...

UBUNTU-CVE-2015-2722

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker...

CVE-2015-2722

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1 allows remote attackers to execute arbitrary code via vectors involving attachment of an XMLHttpRequest object to a shared worker...

PT-2015-1434

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 39.0 Mozilla Firefox ESR versions prior to 31.8 Mozilla Firefox ESR versions prior to 38.1 Description The issue is related to a use-after-free vulnerability in the CanonicalizeXPCOMParticipant function. This...

UBUNTU-CVE-2014-1719

Use-after-free vulnerability in the WebSharedWorkerStub::OnTerminateWorkerContext function in content/worker/websharedworkerstub.cc in the Web Workers implementation in Google Chrome before 34.0.1847.116 allows remote attackers to cause a denial of service heap memory corruption or possibly have...