Lucene search
+L

142 matches found

OSV
OSV
•added 2022/07/26 10:15 p.m.•36 views

CVE-2022-1499

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS8AI score
SaveExploits0References3
OSV
OSV
•added 2022/07/26 10:15 p.m.•3 views

DEBIAN-CVE-2022-1499

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS6.3AI score0.00772EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2022/07/26 10:15 p.m.•52 views

CVE-2022-1499

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS6.3AI score0.00772EPSS
SaveExploits1References1
OSV
OSV
•added 2022/07/26 10:15 p.m.•16 views

UBUNTU-CVE-2022-1499

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS6.3AI score0.00772EPSS
SaveExploits1References2
CVE
CVE
•added 2022/07/26 9:35 p.m.•265 views

CVE-2022-1499

CVE-2022-1499 – Chrome/Chromium WebAuthentication bypass Affected software: Google Chrome (Chromium derivatives) on desktop platforms; affected component: WebAuthentication implementation.Root cause: Inappropriate implementation in WebAuthentication allowed a remote attacker to bypass the same-or...

6.3CVSS6.3AI score0.00772EPSS
SaveExploits1References3Affected Software1
AlpineLinux
AlpineLinux
•added 2022/07/26 9:35 p.m.•107 views

CVE-2022-1499

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS6.3AI score0.00772EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/26 12:00 a.m.•3 views

CVE-2022-1499: Incorrect Authorization

Inappropriate implementation in WebAuthentication in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass same origin policy via a crafted HTML page...

6.3CVSS6.1AI score0.00772EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2022/05/03 12:00 a.m.•78 views

Mageia: Security Advisory (MGASA-2022-0158)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.7AI score0.01186EPSS
SaveExploits23References4
Microsoft CVE
Microsoft CVE
•added 2022/04/28 3:56 p.m.•58 views

Chromium: CVE-2022-1499 Inappropriate implementation in WebAuthentication

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.3CVSS6.5AI score0.00772EPSS
SaveExploits1
Veracode
Veracode
•added 2022/04/28 2:16 p.m.•33 views

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to an Inappropriate implementation in WebAuthentication...

6.3CVSS6.3AI score0.00772EPSS
SaveExploits1References4Affected Software2
Kaspersky
Kaspersky
•added 2022/04/28 12:00 a.m.•57 views

KLA12519 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free...

8.8CVSS7.7AI score0.01186EPSS
SaveExploits21References26
Positive Technologies
Positive Technologies
•added 2022/04/26 12:00 a.m.•3 views

PT-2022-2412

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.41 Microsoft Edge affected versions not specified Description The issue is related to an inappropriate implementation in WebAuthentication, which may allow a remote attacker to bypass the same origin...

6.3CVSS0.00772EPSS
SaveExploits1
FreeBSD
FreeBSD
•added 2022/04/26 12:00 a.m.•100 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 30 security fixes, including: 1313905 High CVE-2022-1477: Use after free in Vulkan. Reported by SeongHwan Park SeHwa on 2022-04-06 1299261 High CVE-2022-1478: Use after free in SwiftShader. Reported by SeongHwan Park SeHwa on 2022-02-20 1305190 High...

8.8CVSS7.1AI score0.01186EPSS
SaveExploits23References1
Kaspersky
Kaspersky
•added 2022/04/26 12:00 a.m.•558 views

KLA12517 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Input can...

9.6CVSS7.7AI score0.01344EPSS
SaveExploits25References2
Veracode
Veracode
•added 2022/03/31 11:52 a.m.•20 views

Buffer Overflow

Glewlwyd SSO server is vulnerable to Buffer overflow. The vulnerability is due to a webauthentication assertion, which results in Denial of Service...

9.8CVSS6.8AI score0.01557EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2022/01/12 12:00 a.m.•18 views

The vulnerability of the WebAuthentication user authentication mechanism in Google Chrome allows a hacker to disclose protected information.

The vulnerability of the WebAuthentication user authentication mechanism of Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose protected information...

3.1CVSS7AI score0.00856EPSS
SaveExploits0References11Affected Software6
BDU FSTEC
BDU FSTEC
•added 2022/01/10 12:00 a.m.•16 views

The vulnerability in the WebAuthentication browser implementation by Google Chrome, related to the use of memory after it is freed, allows a hacker to compromise the user’s rendering process.

The vulnerability of the WebAuthentication browser implementation by Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the rendering process of a user whose credit card is stored in their Google account...

8.8CVSS7.9AI score0.01346EPSS
SaveExploits1References10Affected Software7
OPENSUSE Linux
OPENSUSE Linux
•added 2021/12/28 12:00 a.m.•64 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1632-1 Rating: important References: 1192310 1192734 1193519 1193713 Cross-References: CVE-2021-38005 CVE-2021-38006 CVE-2021-38007 CVE-2021-38008 CVE-2021-38009 CVE-2021-38010 CVE-2021-38011 CVE-2021-38012...

9.6CVSS9.3AI score0.07836EPSS
SaveExploits2References4
NVD
NVD
•added 2021/12/23 1:15 a.m.•27 views

CVE-2021-38022

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS0.00856EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/12/23 1:15 a.m.•13 views

CVE-2021-38022

Inappropriate implementation in WebAuthentication in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

6.5CVSS6.8AI score0.00856EPSS
SaveExploits0References6
Rows per page
Query Builder