CVE-2021-30612

Chromium is affected by CVE-2021-30612, a Use-After-Free in WebRTC. The vulnerability affects Chromium/Chromium-based builds where WebRTC handling can dereference freed objects, potentially leading to memory corruption with high impact (confidentiality, integrity, and availability). The CVSS 3.1 ...

CVE-2016-7208

Technical details about CVE-2016-7208 are not publicly provided in the supplied Connected documents. The available sources describe a ChakraCore memory corruption issue affecting Microsoft Edge , but no product/version/patch specifics are included. Monitor for updates.

CVE-2016-7203

CVE-2016-7203 concerns the Chakra JavaScript engine in Microsoft Edge, described as a memory corruption vulnerability that could allow remote code execution or a denial of service via a crafted website. Public details in the initial entry note the issue as distinct from other CVEs in the same fam...

CVE-2017-0231

Public technical details for CVE-2017-0231 are not provided in the connected documents. They only state a SmartScreen spoofing issue in Microsoft browsers; no affected products, versions, or remediation are specified. Monitor for updates.

CVE-2018-8287

CVE-2018-8287 describes a remote code execution vulnerability in the ChakraCore scripting engine and affected Microsoft browsers (Internet Explorer 11, Edge) due to memory handling. The connected advisories (GHSA) mirror the description and identify ChakraCore as the affected component; no specif...

CVE-2024-26247

CVE-2024-26247 is a Microsoft Edge (Chromium-based) security feature bypass vulnerability. Affected component: Edge’s Chromium-based browser; root cause: bypass of security features as described in multiple sources. Impact: ensures bypass with a CVSSv3.1 base score of 4.7 (Network, no confidentia...

CVE-2021-21141

CVE-2021-21141 affects Chromium-based browsers (Chrome/Chromium) up to version 88.0.4324.96, due to insufficient policy enforcement in the File System API. This allows a remote attacker to bypass the file-extension policy via a crafted HTML page. The issue is mitigated by upgrading to 88.0.4324.9...

CVE-2021-30606

CVE-2021-30606 is a use-after-free in Chromium’s Blink component. Affects Chromium-based browsers (as reflected in multiple feeds, e.g., Fedora package updates for chromium 93.0.4577.63 and Chrome release notes) with the underlying issue in Blink. Impact is rated High (CVSSv3.1: AV:N/AC:L/PR:N/UI...

CVE-2024-26188

CVE-2024-26188 (Microsoft Edge, Chromium-based) — Spoofing vulnerability affecting Edge for desktop/mobile (Chromium-based). Affected component: browser UI spoofing vector, with underlying issue described as spoofing vulnerability in Edge’s Chromium-based engine. CVSS 3.1: Network attack, no priv...

CVE-2024-29057

Microsoft Edge (Chromium-based) is affected by CVE-2024-29057, described as a spoofing vulnerability that can spoof user interface elements. The data indicates network-based access with low attack complexity and user interaction required, yielding a MEDIUM severity (CVSS 3.1: 4.3) and potential U...

CVE-2025-21253

CVE-2025-21253 affects Microsoft Edge for iOS and Android. A spoofing vulnerability is described, arising from UI handling errors that could mislead users. The CVE has a MEDIUM base score (CVSSv3.1: 5.3; Network attack vector, no user interaction required, low attack complexity) per the provided ...

CVE-2021-30618

Technical details about CVE-2021-30618 are not publicly provided in the supplied connected documents. Monitoring for updates is advised.

CVE-2021-30610

CVE-2021-30610 is a use-after-free vulnerability in Chromium’s Extensions API. The issue affects Chromium components used by extensions and is documented with a high impact (C/H/I/A) in CVSS 3.1 (8.8) and a network attack vector with user interaction required. Exploitation status is not provided ...

CVE-2020-0827

Technical details about CVE-2020-0827 are not publicly provided in the supplied documents. The connected EUVD records mention malware in 'sbrugna' but do not describe affected products, root cause, or mitigation. Monitor for updates.

CVE-2021-30623

CVE-2021-30623 is a use-after-free in Chromium's Bookmarks code. The connected feeds identify Chromium/Chromium-based Chrome involvement and note the issue among Chrome security fixes; one Fedora entry references a chromium update addressing this family of fixes. The materials do not provide expl...

CVE-2021-30608

CVE-2021-30608 is a Chromium use-after-free vulnerability in the Web Share feature. Affected component: Web Share in Chromium/Chrome. Root cause indicated: use-after-free. Exploitation status is not provided in the documents. Several vendor advisories reference the CVE (e.g., Chromium-based updat...

CVE-2021-30613

CVE-2021-30613 affects Chromium and is described as a Use-After-Free in the Base internals. The provided documents confirm this vulnerability exists in Chromium components and include multiple vendor advisories (e.g., Alpine, Debian, Fedora/Gentoo references) referencing the same CVE. The root ca...

CVE-2021-30619

CVE-2021-30619 is a Chromium UI spoofing vulnerability in Autofill. Connected advisories confirm Chromium as the affected product and reference security updates (e.g., Fedora chromium 93.0.4577.63-1.fc35 and related feeds). The CVE description indicates UI spoofing with integrity impact, and the ...

CVE-2021-30620

CVE-2021-30620 affects Chromium/Blink and is caused by insufficient policy enforcement in Blink. The vulnerability is cited in multiple feeds (Astra Linux, Alpine, Fedora advisories) and maps to a high-severity issue with network exposure. According to the connected documents, the root cause is i...

CVE-2021-30615

CVE-2021-30615 is a Chromium-based cross-origin data leak in Navigation. Connected documents show affected Chromium packages in Fedora (chromium-93.0.4577.63-1.fcXX) and references to Chromium updates in Astra Linux and Alpine Linux feeds, indicating remediation through updating Chromium to a new...

CVE-2021-30616

CVE-2021-30616 is a reported vulnerability in Chromium involving a Use after free in Media . The connected documents confirm the affected component is Chromium’s media handling code, with the root cause described as a use-after-free. Impacts are described as affecting confidentiality, integrity, ...

CVE-2021-30611

Chromium: CVE-2021-30611 is a Use-After-Free in WebRTC. Affected component is Chromium WebRTC; underlying issue is a use-after-free in WebRTC code paths. CVSSv3.1 base score 8.8 (HIGH) with network attack vector, no privileges required, user interaction required, and high impact on confidentialit...

CVE-2021-30614

CVE-2021-30614 is a Chromium/Chrome vulnerability: a heap buffer overflow in TabStrip. Connected sources confirm this CVE and note multiple distributions issued updates (e.g., Fedora chromium-93.0.4577.63 and related Chromium patches). Affected component: Chromium/Chrome browser TabStrip handling...

CVE-2021-30621

Chromium/CVE-2021-30621: UI Spoofing in Autofill. Affects Chromium and downstream Chromium-based builds (e.g., Chromium 93.x updates noted in Fedora/Alpine security bulletins). Description consistently labels a UI spoofing flaw in Autofill; connected advisories reference Chromium security fixes b...

CVE-2021-30622

CVE-2021-30622 is a Use-After-Free vulnerability in Chromium related to WebApp Installs. Connected documents confirm the issue affects Chromium/WebApp Installs and show multiple vendor advisories and package updates (e.g., Chromium 93.x updates for Fedora and Alpine Linux) addressing this CVE. Th...

CVE-2024-30057

CVE-2024-30057 — Microsoft Edge for iOS Spoofing Vulnerability Affected software: Microsoft Edge for iOS (and Edge Chromium-based variants listed in related advisories). What’s vulnerable: An unspecified spoofing vulnerability in Edge for iOS that can be exploited to spoof the user interface. The...

CVE-2021-30607

CVE-2021-30607 is a Use-After-Free vulnerability in Chromium’s Permissions handling. Affected software includes Chromium/Chrome builds as part of Chromium-based browsers; public feeds list Chromium versions such as Chromium 93.0.4577.63 (e.g., Fedora 34/35 package updates) addressing this issue. ...

CVE-2021-30609

CVE-2021-30609 is a use-after-free vulnerability in Chromium’s Sign-In code path. Connected advisories (Astra Linux, Fedora package updates) indicate Chromium/Chromium-based packages were updated to address this issue (e.g., Chromium 93.0.4577.x in Fedora updates). The available documents do not ...

CVE-2022-23258

CVE-2022-23258: Microsoft Edge for Android spoofing vulnerability has concrete public details in connected documents. Affected product: Microsoft Edge for Android (Chromium-based). The issue is described as a UI spoofing vulnerability that could mislead users; underlying cause relates to spoofing...

CVE-2016-7288

CVE-2016-7288 is discussed in connected analysis as an MS Edge UAF vulnerability in the JavaScript TypedArray.sort path (TypedArrayBase::EntrySort) triggered via a user-supplied compare function. The root cause is memory-safety misuse during qsort_s-based sorting of TypedArrays, enabling memory c...

CVE-2023-28301

CVE-2023-28301 refers to a Tampering Vulnerability in Microsoft Edge (Chromium-based). The provided documents identify the affected product as Microsoft Edge for Chromium-based builds, with remediation noted as updating to version 112.0.1722.34 or later (per Nessus plugin data). The exact root ca...

CVE-2019-0539

CVE-2019-0539 is an in-memory memory-corruption vulnerability in Microsoft Edge/ChakraCore where the Chakra JIT/type-confusion paths expose remote code execution. Public references describe exploitation through Type Confusion in Chakra Core/Edge, with exploit examples showing read/write primitive...

CVE-2019-1237

Technical details for CVE-2019-1237 are not publicly available in the provided connected documents. No concrete affected products, versions, root cause, or mitigations are present here. Monitor for updates from authoritative sources to obtain specifics and remediation guidance.

CVE-2020-17052

CVE-2020-17052 is a Scripting Engine Memory Corruption Vulnerability. Connected data confirms the issue as a memory corruption in a scripting engine and labels it with CVSS metrics (CVSSv3.1 base score 8.1, high impact on confidentiality, integrity, and availability; network attack vector; no pri...

CVE-2024-41879

Adobe Acrobat Reader (versions 127.2651.105 and earlier) is affected by an out-of-bounds write vulnerability that can lead to arbitrary code execution in the context of the current user. Exploitation requires user interaction (victim opens a malicious file); public exploits exist for this CVE. A ...

CVE-2020-0768

Technical details for CVE-2020-0768 are not provided in the connected documents. Public details appear limited to initial description. Monitor for updates from official sources.

CVE-2020-1172

CVE-2020-1172 describes a remote code execution in the ChakraCore scripting engine caused by memory corruption when handling objects in memory. The issue could let an attacker execute code with the current user’s privileges (high impact if the user has admin rights). The vulnerability is addresse...

CVE-2024-26196

CVE-2024-26196 is a Chromium-based Microsoft Edge for Android information-disclosure vulnerability. The CVE entry describes an information disclosure flaw in Edge for Android; CVSSv3.1 base score 4.3 (Medium) with network attack vector, no privileges required, user interaction required, and impac...

CVE-2024-38208

CVE-2024-38208 is linked to a spoofing vulnerability in Microsoft Edge for Android. Connected sources describe a remote spoofing risk that could mislead users by spoofing the browser UI. Affected product: Microsoft Edge for Android (Chromium-based). The core issue is described as a spoofing vulne...

CVE-2019-0608

Technical details about CVE-2019-0608 are not publicly available in the provided documents. The connected EUVD and MSKB entries do not specify affected products, impact, or remediation. Monitor for updates as new information becomes available.

CVE-2020-1057

Technical details for CVE-2020-1057 are not publicly available in the provided connected documents. We cannot identify affected products/versions or remediation from these sources. Monitor official Microsoft/MSRC advisories and related CVE references for concrete information.

CVE-2020-0823

Technical details on CVE-2020-0823 are not provided in the supplied documents; no specifics on affected products, root cause, impact, or fixes are disclosed. Monitor for updates.

CVE-2023-28284

CVE-2023-28284 concerns Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability. Affected product: Edge (Chromium-based). The available data describe the issue as a Security Feature Bypass, with a CVSSv3 base score of 4.3 (Medium) and an attack vector of Network, requiring user inte...

CVE-2019-1107

CVE-2019-1107 concerns a remote code execution in Microsoft Edge via the Chakra scripting engine’s in-memory handling. The connected docs (GitHub advisories GHSA entries) reference an Out-of-bounds write/memory corruption in Chakra as the underlying issue and identify Edge/chakra as affected, ali...

CVE-2019-1217

Technical details for CVE-2019-1217 are not publicly available in the provided connected documents; no affected products, versions, or remediation are described here. Monitor for updates.

CVE-2020-17048

Technical details for CVE-2020-17048 are not publicly provided in the supplied connected documents. No specific affected products, root cause, impact, or remediation are confirmed here. Monitor for updates from NVD/MSRC/GHSA as they become available.

CVE-2020-0829

Technical details about CVE-2020-0829 are not publicly available in the provided documents. Monitor for updates from trusted sources to assess impact, affected products, and fixes.

CVE-2019-0592

CVE-2019-0592 is a ChakraCore/Edge memory-corruption remote code execution issue. Connected sources corroborate a Chakra memory-management flaw that can lead to RCE in Microsoft Edge when handling in-memory objects. No exploit specifics are provided in the documents. Remediation details are not e...

CVE-2019-1335

Technical details for CVE-2019-1335 are not publicly available in the provided documents. Monitor for updates and potential advisory disclosures.

CVE-2020-1555

CVE-2020-1555 is a memory corruption vulnerability in the Edge HTML-based scripting engine. The vulnerability allows an attacker to execute arbitrary code in the context of the current user, with the potential for full system compromise if the user has admin rights. The issue stems from how the E...