WebUI Confidential Data Access

The vulnerability of the WebUI user interface of Google Chrome and Microsoft Edge is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain access to confidential data remotely...

Autofill Component Data Compromise

The vulnerability of the Autofill component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service interruptions through the use...

Chromecast web browsers DoS

The vulnerability of Google Chrome and Microsoft Edge web browsers relates to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through a specially created HTML page...

Codecs Component Confidential Data Access

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their permitted limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

DeviceBoundSessionCredentials Component Compromise Data Compromise

The vulnerability of the DeviceBoundSessionCredentials component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through a specially crafted HTML page...

Network Component Compromise Data Compromise

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially crafted HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

DevTools DoS

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions using a malicious file...

Media component Confidential Data Access

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Skia Graphic Library Confidential Data Access

The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Password component compromise Data Compromise

The vulnerability of the Password component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

Media UI component in Data Compromise

The vulnerability of the Media UI component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service interruptions through the use...

MediaCapture Component Compromise Data Compromise

The vulnerability of the MediaCapture component in Google Chrome and Microsoft Edge involves exploiting authentication bypass techniques. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

Paint Component Data Compromise

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

Google Chrome Permissions control element Data Compromise

The vulnerability of the Permissions control element in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to affect data integrity through a specially created HTML page...

Extensions Component Data Compromise

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

Google Chrome Edge XML Data Compromise

The vulnerability of XML components in Google Chrome and Microsoft Edge relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data and compromise its integrity through a specially creat...

SurfaceCapture component in Google

The vulnerability of the SurfaceCapture component in Google Chrome and Microsoft Edge relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service interruptions through...

CSS components Confidential Data Access

The vulnerability of the CSS component in Google Chrome and Microsoft Edge is related to improper protection against attacks through external physical channels. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

Navigation Component DoS

The vulnerability of the Navigation component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Ozone Component DoS

The vulnerability of the Ozone component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Network Component Confidential Data Access

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

SplitView Component DoS

The vulnerability of the SplitView component in Google Chrome and Microsoft Edge relates to the improper presentation of critical information to the user interface. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

SplitView Component Compromise DoS

The vulnerability of the SplitView component in Google Chrome and Microsoft Edge relates to the improper presentation of critical information to the user interface. Exploiting this vulnerability can allow an attacker to compromise data integrity and also cause service interruptions through the us...

Google Chrome Bluetooth Access Confidential Data

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to lack of access control. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data through a specially created HTML page...

Bluetooth Component DoS

The vulnerability of the Bluetooth components in Google Chrome and Microsoft Edge browsers is related to the implementation of security features at the client side. Exploiting this vulnerability allows a malicious actor to cause service interruptions through a specially created HTML page...

BrowserTag Component DoS

The vulnerability of the BrowserTag component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

DHCP Server Privilege Escalation

The vulnerability of DHCP servers for Windows operating systems is related to incorrect definition of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

DHCP Server Privilege Escalation

The vulnerability of DHCP servers for Windows operating systems is related to incorrect definition of symbolic links. Exploiting this vulnerability can allow an attacker to increase their privileges...

Password Component Access Confidential Data

The vulnerability of the Password component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential data through a specially created HTML page...

TFTP Server Code Execution

The vulnerability of the TFTP server of the Windows Deployment Services service in Windows operating systems is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

WebNN Component Confidential Data Access

The vulnerability of the WebNN component in Google Chrome and Microsoft Edge is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

DarkMode Component Compromise Data Compromise

The vulnerability of the DarkMode component in Google Chrome and Microsoft Edge relates to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

DevTools DoS

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

DevTools Component Google Chrome Microsoft Edge DoS

The vulnerability of the DevTools component in Google Chrome and Microsoft Edge is related to the user interface’s false representation of critical information. Exploiting this vulnerability can allow an attacker to compromise data integrity and cause service interruptions...

ANGLE Component Confidential Data Access

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Dawn Component Confidential Data Access

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

ANGLE DoS

The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

Google Chrome Microsoft Edge DoS

The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially crafted HTML page...

Dawn Component DoS

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Views Component DoS

The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

Forms Component DoS

The vulnerability of the Forms component in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

ANGLE Library Code Execution

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge relates to writing beyond the buffer limit. Exploiting this vulnerability allows a malicious actor to execute arbitrary code within the sandbox by using a specially created HTML page...

Media component Code Execution

The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code within the sandbox by using a specially created HTML page...

TSIG Authentication Privilege Escalation

The vulnerability of the TSIG authentication algorithm used by coredns DNS servers is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

RUGGEDCOM ROX Arbitrary File Read Root

The vulnerability of the web interface of microprogramming software for routing and switching platforms such as RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDC...

Nodemailer SSRF

The vulnerability of the MailComposer.compile method in the Nodemailer email sending library is related to improper external manipulation of file names or file paths. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information and perform an SSRF attack...

vc4_free_hang_state Heap Buffer Overflow DoS

The vulnerability of the vc4freehangstate function in the drivers/gpu/drm/vc4/vc4gem.c module of the Direct Rendering Infrastructure DRI driver for the Linux kernel is related to improper memory release mechanisms memory leaks. Exploiting this vulnerability can allow an attacker to cause a system...