Category
Browsers
10,968 known vulnerabilities.
10,968 results · Feed
-
Low 3.7
Poly VVX 601 Web Configuration Application random values
A vulnerability classified as problematic has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550…
-
High 8.8
Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploi…
KEV Jan 2, 2024 -
Unscored —
Insufficient policy enforcement in ADB in Google Chrome on ChromeOS prior to 114.0.5735.90 allowed a local attacker to …
-
Unscored —
Memory safety bugs present in Firefox 120. Some of these bugs showed evidence of memory corruption and we presume that …
-
Unscored —
Browser tab titles were being leaked by GNOME to system logs. This could potentially expose the browsing habits of user…
-
Unscored —
Under certain conditions, Firefox did not display a warning when a user attempted to navigate to a new protocol handler…
-
Unscored —
Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications display…
-
Medium 6.5
A `<dialog>` element could have been manipulated to paint content outside of a sandboxed iframe. This could allow un…
-
Unscored —
In some instances, the user-agent would allow push requests which lacked a valid VAPID even though the push manager sub…
-
Unscored —
The timing of a button click causing a popup to disappear was approximately the same length as the anti-clickjacking de…
-
High 8.8
TypedArrays can be fallible and lacked proper exception handling. This could lead to abuse in other APIs which expect T…
-
Unscored —
`EncryptingOutputStream` was susceptible to exposing uninitialized data. This issue could only be abused in order to wr…
-
Unscored —
Multiple NSS NIST curves were susceptible to a side-channel attack known as "Minerva". This attack could potentially al…
-
Unscored —
Memory safety bugs present in Firefox 120, Firefox ESR 115.5, and Thunderbird 115.5. Some of these bugs showed evidence…
-
Unscored —
The `ShutdownObserver()` was susceptible to potentially undefined behavior due to its reliance on a dynamic type that l…
-
Unscored —
A use-after-free was identified in the `nsDNSService::Init`. This issue appears to manifest rarely during start-up. Thi…
-
Unscored —
The `nsWindow::PickerOpen(void)` method was susceptible to a heap buffer overflow when running in headless mode. This v…
-
Unscored —
The `VideoBridge` allowed any content process to use textures produced by remote decoders. This could be abused to esca…
-
Unscored —
A use-after-free condition affected TLS socket creation when under memory pressure. This vulnerability affects Firefox …
-
High 8.8
Firefox was susceptible to a heap buffer overflow in `nsTextFragment` due to insufficient OOM handling. This vulnerabil…
-
Unscored —
When resolving a symlink, a race may occur where the buffer passed to `readlink` may actually be smaller than necessary…
-
Unscored —CVE-2023-6856 EPSS 21%
The WebGL `DrawElementsInstanced` method was susceptible to a heap buffer overflow when used on systems with the Mesa V…
-
Medium 4.3
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability
-
High 8.8
Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap co…
-
High 8.8
Use after free in WebRTC in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap…
-
High 8.8
Use after free in FedCM in Google Chrome prior to 120.0.6099.109 allowed a remote attacker who convinced a user to enga…
-
High 8.8
Use after free in Blink in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap …
-
High 8.8
Type confusion in V8 in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap cor…
-
Unscored —
Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit hea…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, watchOS 1…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, macOS Sonoma 14.2, iOS 17.2 …
-
Medium 4.3
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
-
Medium 4.8
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
-
Critical 9.6
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
-
Medium 6.5
Inappropriate implementation in Web Browser UI in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to pot…
-
Unscored —
Inappropriate implementation in Autofill in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to bypass Au…
-
Unscored —
Use after free in Media Capture in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a user …
-
Unscored —
Use after free in Media Stream in Google Chrome prior to 120.0.6099.62 allowed a remote attacker to potentially exploit…
-
Unscored —
Use after free in Side Panel Search in Google Chrome prior to 120.0.6099.62 allowed a remote attacker who convinced a u…
-
High 8.8CVE-2023-42917 Exploited
A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.…
KEV Dec 4, 2023