98 matches found
CVE-2021-30549
Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-30549
Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...
CVE-2021-30549
CVE-2021-30549 is a use-after-free in Chromium’s Spell check component affecting Chromium-based browsers up to version 91.0.4472.101. The vulnerability can be triggered when a user installs a malicious extension, potentially enabling heap corruption and remote code execution via a crafted HTML pa...
CVE-2021-30549
Use after free in Spell check in Google Chrome prior to 91.0.4472.101 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...
Denial Of Service (DoS)
chromium is vulnerable to denial of service. The vulnerability exists due to a use after free in the Spell check component...
Chromium: CVE-2021-30549 Use after free in Spell check
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Google Chrome post-release reuse vulnerability (CNVD-2021-43404)
Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in "Spell Check" in Google Chrome versions prior to 91.0.4472.101. No details of the vulnerability are available at this...
Google Chrome 资源管理错误漏洞
Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A post-release reuse vulnerability exists in "Spell Check" in Google Chrome versions prior to 91.0.4472.101. No details of the vulnerability are available at this...
Update for RichTextBox controls and ALT codes in Windows 8.1
Update for RichTextBox controls and ALT codes in Windows 8.1 Summary This update fixes the following issues: You have a RichTextBox control in a Windows-based application in Windows 8.1. When you try to check the spelling within the control, the application crashes in the Msftedit.dll file. When...
CVE-2019-6027
Cross-site request forgery CSRF vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-6027
Cross-site request forgery CSRF vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
CVE-2019-6027
The CVE-2019-6027 entry concerns the WordPress WP Spell Check plugin (versions ≤ 7.1.9). A CSRF vulnerability allows an attacker to cause actions on behalf of an authenticated admin when a user views a malicious page, per multiple connected sources. Impact is described as hijacking administrator ...
CVE-2019-6027
Cross-site request forgery CSRF vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors...
WordPress Plugin "WP Spell Check" vulnerable to cross-site request forgery
Overview WordPress Plugin "WP Spell Check" provided by Tips and Tricks HQ contains a cross-site request forgery vulnerability CWE-352. Takuya Yamaguchi of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University directly reported these vulnerabilities...
JVN#26838191: WordPress Plugin "WP Spell Check" vulnerable to cross-site request forgery
WordPress Plugin "WP Spell Check" provided by WP Spell Check contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the plugin Update the plugin according to the information...
WordPress WP Spell Check plugin <= 7.1.9 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability found by Takuya Yamaguchi in WordPress WP Spell Check plugin versions = 7.1.9. Solution Update the WordPress WP Spell Check plugin to the latest available version at least 7.1.10...
WordPress wp-spell-check Cross-Site Request Forgery Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. wp-spell-check is a spell-checking plugin used in it. A cross-site request forgery vulnerability exists in WordPress wp-spell-check...
WP Spell Check < 7.1.10 - Cross-Site Request Forgery (CSRF)
The plugin was affected by a CSRF vulnerability, allowing attackers to force logged in users perform unwanted actions, which could lead to Cross-Site Scripting XSS...