Edge Chromium@* Security Vulnerabilities and Issues — Edge Chromium@* CVE List

Lucene search

MicrosoftEdge Chromium*

29 matches found

CVE•added 2021/02/22 10:15 p.m.•817 views

CVE-2021-21157

Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8CVSS9AI score0.01551EPSS

CVE•added 2021/06/08 11:15 p.m.•404 views

CVE-2021-33741

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

8.2CVSS7.7AI score0.0191EPSS

CVE•added 2021/02/09 2:15 p.m.•219 views

CVE-2021-21132

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.

9.6CVSS8.7AI score0.15757EPSS

CVE•added 2021/02/09 2:15 p.m.•209 views

CVE-2021-21123

Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

6.5CVSS6.5AI score0.026EPSS

CVE•added 2021/02/09 2:15 p.m.•202 views

CVE-2021-21121

Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

9.6CVSS9.2AI score0.01546EPSS

CVE•added 2021/02/09 2:15 p.m.•202 views

CVE-2021-21135

Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

6.5CVSS6.4AI score0.24927EPSS

CVE•added 2021/02/09 2:15 p.m.•200 views

CVE-2021-21122

Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8CVSS9AI score0.01993EPSS

CVE•added 2021/02/09 2:15 p.m.•199 views

CVE-2021-21119

Use after free in Media in Google Chrome prior to 88.0.4324.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

8.8CVSS9AI score0.01993EPSS

CVE•added 2021/02/09 2:15 p.m.•197 views

CVE-2021-21127

Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.

8.8CVSS8.1AI score0.01167EPSS

CVE•added 2021/02/09 2:15 p.m.•196 views

CVE-2021-21126

Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.

6.5CVSS6.6AI score0.03236EPSS

CVE•added 2021/02/09 2:15 p.m.•193 views

CVE-2021-21128

Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8CVSS8.9AI score0.04944EPSS

CVE•added 2021/02/09 2:15 p.m.•192 views

CVE-2021-21118

Insufficient data validation in V8 in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

8.8CVSS8.3AI score0.29046EPSS

CVE•added 2021/02/09 2:15 p.m.•192 views

CVE-2021-21120

Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

8.8CVSS9AI score0.04063EPSS

CVE•added 2021/02/09 2:15 p.m.•191 views

CVE-2021-21129

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

6.5CVSS6.5AI score0.01988EPSS

CVE•added 2021/02/09 2:15 p.m.•188 views

CVE-2021-21137

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.

6.5CVSS6.4AI score0.01367EPSS

CVE•added 2021/02/09 2:15 p.m.•183 views

CVE-2021-21130

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

6.5CVSS6.5AI score0.01988EPSS

CVE•added 2021/02/09 2:15 p.m.•183 views

CVE-2021-21131

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

6.5CVSS6.5AI score0.00467EPSS

CVE•added 2021/02/09 2:15 p.m.•173 views

CVE-2021-21133

Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.

6.5CVSS6.6AI score0.03992EPSS

CVE•added 2021/02/09 2:15 p.m.•169 views

CVE-2021-21139

Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

6.5CVSS6.7AI score0.01529EPSS

CVE•added 2021/02/09 2:15 p.m.•164 views

CVE-2021-21125

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

8.1CVSS7.7AI score0.02926EPSS

CVE•added 2021/02/09 2:15 p.m.•160 views

CVE-2021-21136

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

6.5CVSS6.3AI score0.08894EPSS

CVE•added 2021/02/09 2:15 p.m.•159 views

CVE-2021-21134

Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.

6.5CVSS6.4AI score0.15325EPSS

CVE•added 2021/02/09 2:15 p.m.•157 views

CVE-2021-21124

Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

9.6CVSS8.8AI score0.09399EPSS

CVE•added 2021/09/15 12:15 p.m.•79 views

CVE-2021-38669

Microsoft Edge (Chromium-based) Tampering Vulnerability

8.8CVSS6.5AI score0.00463EPSS

CVE•added 2021/08/26 6:15 p.m.•75 views

CVE-2021-36928

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

7.8CVSS6.1AI score0.01312EPSS

CVE•added 2021/08/26 6:15 p.m.•71 views

CVE-2021-36929

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability