Lucene search
K

56 matches found

CVE
CVE
added 2021/06/07 12:0 a.m.212 views

CVE-2021-30528

CVE-2021-30528 is a use-after-free vulnerability in the Chromium WebAuthentication component (Chromium/Google Chrome) on Android, before version 91.0.4472.77. The issue can allow a remote attacker who has compromised the renderer process of a user who saved a credit card in their Google account t...

8.8CVSS8.7AI score0.00424EPSS
Exploits1References6Affected Software1
Debian CVE
Debian CVE
added 2021/06/07 12:0 a.m.30 views

CVE-2021-30528

Use after free in WebAuthentication in Google Chrome on Android prior to 91.0.4472.77 allowed a remote attacker who had compromised the renderer process of a user who had saved a credit card in their Google account to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.4AI score0.00424EPSS
Exploits1
Veracode
Veracode
added 2021/05/28 1:3 p.m.25 views

Arbitrary Code Execution

chromium is vulnerable to arbitrary code execution. A use-after-free in WebAuthentication allows an attacker to execute arbitrary code on the host OS by tricking a user into visiting a malicious web page...

8.8CVSS3.9AI score0.00424EPSS
Exploits1References9Affected Software2
Microsoft CVE
Microsoft CVE
added 2021/05/27 7:0 a.m.44 views

Chromium: CVE-2021-30528 Use after free in WebAuthentication

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00424EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2020/06/17 12:0 a.m.42 views

RHEL 6 : chromium-browser (RHSA-2020:2544)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2544 advisory. Chromium is an open-source web browser, powered by WebKit Blink. This update upgrades Chromium to version 83.0.4103.97. Security Fixes:...

9.6CVSS7.2AI score0.42466EPSS
Exploits13References62
Tenable Nessus
Tenable Nessus
added 2020/06/08 12:0 a.m.38 views

FreeBSD : chromium -- multiple vulnerabilities (a2caf7bd-a719-11ea-a857-e09467587c17)

Chrome Releases reports : This update includes 5 security fixes. Below, we highlight fixes that were contributed by external researchers. - 1082105 High CVE-2020-6493: Use after free in WebAuthentication. Reported by Anonymous on 2020-05-13 - 1083972 High CVE-2020-6494: Incorrect security UI in...

9.6CVSS7.5AI score0.01637EPSS
Exploits0References6
RedhatCVE
RedhatCVE
added 2020/06/05 4:55 p.m.23 views

CVE-2020-6493

Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

6.8CVSS2.5AI score0.01637EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2020/06/05 12:0 a.m.32 views

Google Chrome Security Update (stable-channel-update-for-desktop-2020-06) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.6CVSS6.6AI score0.01637EPSS
Exploits0References1
NVD
NVD
added 2020/06/03 11:15 p.m.20 views

CVE-2020-6493

Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS9.4AI score0.01637EPSS
Exploits0References6
Prion
Prion
added 2020/06/03 11:15 p.m.14 views

Design/Logic Flaw

Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

6.8CVSS9.2AI score0.01637EPSS
Exploits0References6Affected Software4
UbuntuCve
UbuntuCve
added 2020/06/03 11:15 p.m.21 views

CVE-2020-6493

Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS7.2AI score0.01637EPSS
Exploits0References3
Cvelist
Cvelist
added 2020/06/03 10:50 p.m.16 views

CVE-2020-6493

Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.4AI score0.01637EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2020/06/03 10:50 p.m.32 views

CVE-2020-6493

Use after free in WebAuthentication in Google Chrome prior to 83.0.4103.97 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page...

9.6CVSS9.8AI score0.01637EPSS
Exploits0
CVE
CVE
added 2020/06/03 10:50 p.m.300 views

CVE-2020-6493

CVE-2020-6493: A use-after-free in Chrome’s WebAuthentication component (older than 83.0.4103.97) could allow a remote attacker who compromises the renderer to escape the sandbox via a crafted HTML page. Affected product is Google Chrome. The issue is fixed in 83.0.4103.97 (upstream); Debian/Arch...

9.6CVSS9.2AI score0.01637EPSS
Exploits0References6Affected Software1
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2020/06/03 12:0 a.m.35 views

Stable Channel Update for Desktop

The stable channel has been updated to 83.0.4103.97 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictio...

9.6CVSS8.7AI score0.01637EPSS
Exploits0Affected Software1
FreeBSD
FreeBSD
added 2020/06/03 12:0 a.m.36 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 5 security fixes. Below, we highlight fixes that were contributed by external researchers. 1082105 High CVE-2020-6493: Use after free in WebAuthentication. Reported by Anonymous on 2020-05-13 1083972 High CVE-2020-6494: Incorrect security UI in...

9.6CVSS0.2AI score0.01637EPSS
Exploits0References1
Rows per page
Query Builder