Lucene search
+L

356 matches found

CNVD
CNVD
•added 2021/03/03 12:00 a.m.•24 views

Google Chrome heap buffer overflow vulnerability (CNVD-2021-16863)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A heap buffer overflow vulnerability exists in TabStrip in versions prior to Google Chrome 89.0.4389.72. An attacker can use this vulnerability to exploit heap...

8.8CVSS8.2AI score0.01726EPSS
SaveExploits1References1
CNVD
CNVD
•added 2021/03/03 12:00 a.m.•43 views

Google Chrome Security UI Incorrect Vulnerability (CNVD-2021-17296)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A security UI incorrectness vulnerability exists in TabStrip and Navigation in versions of Google Chrome prior to 89.0.4389.72. A remote attacker can exploit this...

6.5CVSS5.9AI score0.01659EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2021/03/03 12:00 a.m.•14 views

Google Chrome 缓冲区错误漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A heap buffer overflow vulnerability exists in TabStrip in versions prior to Google Chrome 89.0.4389.72. An attacker can use this vulnerability to exploit heap...

8.8CVSS8.2AI score0.01726EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2021/03/02 12:00 a.m.•1 views

PT-2021-2246

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 89.0.4389.72 Description The issue is related to incorrect security UI in TabStrip and Navigation, allowing a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page. This could...

8.5CVSS0.01659EPSS
SaveExploits1
Kaspersky
Kaspersky
•added 2021/03/02 12:00 a.m.•556 views

KLA12106 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A heap buff...

8.8CVSS7.8AI score0.24027EPSS
SaveExploits25References3
BDU FSTEC
BDU FSTEC
•added 2021/02/19 12:00 a.m.•17 views

The vulnerability of the TabStrip control element in the Google Chrome web browser allows a hacker to execute arbitrary code.

The vulnerability of the TabStrip control element in Google Chrome browsers is caused by buffer overflow in the stack. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code using a specially crafted web page...

10CVSS8.5AI score0.01324EPSS
SaveExploits1References8Affected Software5
Positive Technologies
Positive Technologies
•added 2021/02/08 12:00 a.m.•0 views

PT-2021-2528

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 89.0.4389.114 Description: The issue is related to a heap buffer overflow in the TabStrip component of Google Chrome on Windows, which could allow a remote attacker to exploit heap corruption via a crafted HTML...

10CVSS7.4AI score0.01337EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2021/01/29 12:00 a.m.•1 views

PT-2021-2266

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 89.0.4389.72 Description: The issue is related to a heap buffer overflow in the TabStrip element of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This...

8.8CVSS7.1AI score0.01538EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2021/01/27 12:00 a.m.•1 views

PT-2021-2264

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 89.0.4389.72 Description: The issue is related to a heap buffer overflow in the TabStrip element of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This...

8.8CVSS7.2AI score0.01726EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2020/08/12 12:00 a.m.•14 views

The vulnerability of the TabStrip module in the Google Chrome browser allows a hacker to compromise data integrity.

The vulnerability of the TabStrip module in Google Chrome browser is related to the lack of standard permission mechanisms. Exploiting this vulnerability allows a remote attacker to compromise data integrity through a specially created extension...

5.3CVSS7.2AI score0.0134EPSS
SaveExploits1References13Affected Software5
Check Point Advisories
Check Point Advisories
•added 2014/03/31 12:00 a.m.•54 views

Microsoft Windows Common Controls Remote Code Execution - Ver2 (CVE-2012-1856)

A code execution vulnerability has been reported in the Windows Common Controls. The vulnerability is due to a corruption of the system state by the TabStrip ActiveX control. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected syst...

7.6AI score0.72032EPSS
SaveExploits1
VulnCheck KEV
VulnCheck KEV
•added 2013/09/25 12:00 a.m.•17 views

VulnCheck KEV: CVE-2012-1856

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office allows remote attackers to execute arbitrary code via a crafted 1 document or 2 web page that triggers system-state corruption...

9.3CVSS6.4AI score0.72032EPSS
SaveIn wildExploits1References9
Prion
Prion
•added 2012/08/15 1:55 a.m.•44 views

Design/Logic Flaw

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerc...

9.3CVSS8.5AI score0.72032EPSS
SaveExploits1References4Affected Software7
Cvelist
Cvelist
•added 2012/08/15 1:00 a.m.•63 views

CVE-2012-1856

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerc...

7.8AI score0.72032EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/08/15 12:00 a.m.•3 views

CVE-2012-1856: Undefined Security Weakness

The TabStrip ActiveX control in the Common Controls in MSCOMCTL.OCX in Microsoft Office 2003 SP3, Office 2003 Web Components SP3, Office 2007 SP2 and SP3, Office 2010 SP1, SQL Server 2000 SP4, SQL Server 2005 SP4, SQL Server 2008 SP2, SP3, R2, R2 SP1, and R2 SP2, Commerce Server 2002 SP4, Commerc...

9.3CVSS6.6AI score0.72032EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2010/09/06 12:00 a.m.•14 views

PT-2010-1179 · Microsoft · Sql Server +5

Name of the Vulnerable Software and Affected Versions: Microsoft Office versions 2003 SP3, 2007 SP2 and SP3, 2010 SP1 Microsoft SQL Server versions 2000 SP4, 2005 SP4, 2008 SP2, SP3, R2, R2 SP1, and R2 SP2 Microsoft Commerce Server versions 2002 SP4, 2007 SP2, 2009 Gold and R2 Microsoft Host...

9.3CVSS8.3AI score0.72032EPSS
SaveExploits1References13
Rows per page
Query Builder