Lucene search
K

314 matches found

Debian CVE
Debian CVE
added 2022/07/26 9:32 p.m.37 views

CVE-2022-1485

Use after free in File System API in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

7.5CVSS8.8AI score0.0075EPSS
Exploits1
BDU FSTEC
BDU FSTEC
added 2022/06/27 12:0 a.m.3 views

The vulnerability of the File System API interfaces in Google Chrome and Microsoft Edge browsers allows attackers to disclose protected information.

The vulnerability of the File System API interfaces in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to disclose protected information through a specially created web page...

5CVSS5.8AI score0.00456EPSS
Exploits0References5Affected Software4
OpenVAS
OpenVAS
added 2022/06/27 12:0 a.m.37 views

Mageia: Security Advisory (MGASA-2022-0241)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.2AI score0.01286EPSS
Exploits1References5
Veracode
Veracode
added 2022/06/26 4:57 p.m.22 views

Improper Validation

chromium is vulnerable to improper validation. The vulnerability exists due to insufficient policy enforcement in the File System API component which allows an attacker to perform unauthorized actions...

8.8CVSS8.1AI score0.01047EPSS
Exploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/06/24 12:0 a.m.2 views

The vulnerability of the File System API interfaces of Google Chrome and Microsoft Edge allows a hacker to circumvent established security restrictions by using a specially created website.

The vulnerability of the File System API interfaces in Google Chrome and Microsoft Edge is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions by using a specially created website...

6.4CVSS7.6AI score0.01047EPSS
Exploits0References5Affected Software4
Microsoft CVE
Microsoft CVE
added 2022/06/23 7:0 a.m.57 views

Chromium: CVE-2022-2162 Insufficient policy enforcement in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.01047EPSS
Exploits0
OPENSUSE Linux
OPENSUSE Linux
added 2022/06/15 12:0 a.m.51 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10005-1 Rating: important References: 1199893 Cross-References: CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861 CVE-2022-1862...

9.6CVSS6.9AI score0.00862EPSS
Exploits3References1
OPENSUSE Linux
OPENSUSE Linux
added 2022/06/15 12:0 a.m.47 views

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10009-1 Rating: critical References: 1199893 1200139 1200423 Cross-References: CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861...

9.6CVSS9.1AI score0.0106EPSS
Exploits3References3
BDU FSTEC
BDU FSTEC
added 2022/06/07 12:0 a.m.4 views

The vulnerability of the File System API interfaces in Microsoft Edge and Google Chrome browsers allows attackers to circumvent established security restrictions.

The vulnerability of the File System API interfaces in Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions set by the user through a specially created website...

10CVSS6.7AI score0.03002EPSS
Exploits1References10Affected Software6
Microsoft CVE
Microsoft CVE
added 2022/05/31 7:0 a.m.56 views

Chromium: CVE-2022-1857 Insufficient policy enforcement in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.00696EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2022/05/31 7:0 a.m.37 views

Chromium: CVE-2022-1871 Insufficient policy enforcement in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

4.3CVSS6.3AI score0.00456EPSS
Exploits0
Veracode
Veracode
added 2022/05/30 5:32 a.m.28 views

Improper Validation

chromium is vulnerable to improper validation. The vulnerability exists due to insufficient policy enforcement in File System API which allows an attacker to gain access to the system...

4.3CVSS6.9AI score0.00456EPSS
Exploits0References5Affected Software2
Mageia
Mageia
added 2022/05/28 8:56 a.m.55 views

Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to the 102.0.5005.61 version, fixing many bugs and 32 CVE. Some of them are listed below: CVE-2022-1853: Use after free in Indexed DB. CVE-2022-1854: Use after free in ANGLE. CVE-2022-1855: Use after free in Messaging. CVE-2022-1856: Use after...

9.6CVSS0.8AI score0.00862EPSS
Exploits3References3
CNNVD
CNNVD
added 2022/05/24 12:0 a.m.3 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome versions 70.0.3538.67 through 101.0.4951.67, which stems from insufficient policy enforcement in the file system API. A remote attacker can exploit the vulnerability to bypass implemented security...

8.8CVSS8.2AI score0.00696EPSS
Exploits0References13
FreeBSD
FreeBSD
added 2022/05/24 12:0 a.m.44 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 32 security fixes, including: 1324864 Critical CVE-2022-1853: Use after free in Indexed DB. Reported by Anonymous on 2022-05-12 1320024 High CVE-2022-1854: Use after free in ANGLE. Reported by SeongHwan Park SeHwa on 2022-04-27 1228661 High...

9.6CVSS0.1AI score0.00862EPSS
Exploits3References1
RedhatCVE
RedhatCVE
added 2022/05/20 11:7 p.m.43 views

CVE-2021-37970

Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS2.7AI score0.01349EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2022/05/20 10:45 p.m.46 views

CVE-2021-21131

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page...

6.5CVSS3.1AI score0.07953EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/05/13 12:0 a.m.4 views

The vulnerability of the File System API interfaces of Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the File System API interfaces in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS7.6AI score0.0075EPSS
Exploits1References6Affected Software5
Microsoft CVE
Microsoft CVE
added 2022/04/28 3:54 p.m.23 views

Chromium: CVE-2022-1485 Use after free in File System API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

7.5CVSS7.8AI score0.0075EPSS
Exploits1
Veracode
Veracode
added 2022/04/28 2:0 p.m.21 views

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to a Use after free in File System API which allows an attacker to cause an application crash...

7.5CVSS3.4AI score0.0075EPSS
Exploits1References4Affected Software2
Rows per page
Query Builder