Category
Browsers
10,969 known vulnerabilities.
10,969 results · Feed
-
High 8.8
Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user …
-
High 8.8
Use after free in Side Panel in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to…
-
Unscored —
Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfuscate secu…
-
High 8.8
Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to e…
-
High 8.8
Use after free in Printing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to e…
-
High 8.8
Integer overflow in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit heap …
-
Unscored —
Inappropriate implementation in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to obfusca…
-
Unscored —
Incorrect security UI in Downloads in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform domain…
-
Unscored —
Inappropriate implementation in Payments in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to bypass X…
-
High 8.8
Insufficient data validation in USB in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform out o…
-
Medium 5.5
PDF Jbig2 memory-corruption Vulnerability - MSFT T5
Adobe Acrobat for Edge version 118.0.2088.46 (and earlier) is affected by a Use After Free vulnerability. An unauthenticated attacker could leverage this vulnerability to achieve an application denial-of-service in the context of the current user. Exploitatio…
-
High 8.8
A logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, iOS 16…
-
Unscored —
A use-after-free issue was addressed with improved memory management. This issue is fixed in iOS 17.1 and iPadOS 17.1, …
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.…
-
Unscored —
The issue was addressed with improved memory handling. This issue is fixed in iOS 17.1 and iPadOS 17.1, watchOS 10.1, i…
-
High 8.8
Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit he…
-
Medium 6.1
When opening a page in reader mode, the redirect URL could have caused attacker-controlled script to execute in a refle…
-
Unscored —
Address bar spoofing via bidirectional characters
An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. This vulnerability affects Firefox < 117, Firefox ESR < 115.4, and Thunderbird < 115.4.1.
-
Unscored —
Memory safety bugs present in Firefox 118. Some of these bugs showed evidence of memory corruption and we presume that …
-
Unscored —
A malicious web site can enter fullscreen mode while simultaneously triggering a WebAuthn prompt. This could have obscu…
-
Unscored —
Memory safety bugs present in Firefox 118, Firefox ESR 115.3, and Thunderbird 115.3. Some of these bugs showed evidence…
-
High 7.5
During garbage collection extra operations were performed on a object that should not be. This could have led to a pote…
-
Unscored —
The executable file warning was not presented when downloading .msix, .msixbundle, .appx, and .appxbundle files, which …
-
Unscored —
A website could have obscured the full screen notification by using the file open dialog. This could have led to user c…
-
Unscored —
A malicious installed WebExtension could open arbitrary URLs, which under the right circumstance could be leveraged to …
-
High 7.5
Drivers are not always robust to extremely large draw calls and in some cases this scenario could have led to a crash. …
-
Unscored —
Using iterative requests an attacker was able to learn the size of an opaque response, as well as the contents of a ser…
-
Unscored —
An attacker with temporary script access to a site could have set a cookie containing invalid characters using `documen…
-
Unscored —
It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to…
-
Low 2.7
WAGO: Multiple products vulnerable to local file inclusion
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.
-
Medium 4.2
Microsoft Edge (Chromium-based) Spoofing Vulnerability
Microsoft Edge (Chromium-based) Spoofing Vulnerability
-
Unscored —
Inappropriate implementation in Input in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof securi…
-
Unscored —
Use after free in Cast in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who had compromised the render…
-
Unscored —
Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to leak cros…
-
Unscored —
Inappropriate implementation in Installer in Google Chrome prior to 118.0.5993.70 allowed a local attacker to bypass di…
-
Unscored —
Inappropriate implementation in Extensions API in Google Chrome prior to 118.0.5993.70 allowed an attacker who convince…
-
Medium 4.3
Inappropriate implementation in Autofill in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to bypass au…
-
High 8.8
Heap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to e…
-
Unscored —
Inappropriate implementation in DevTools in Google Chrome prior to 118.0.5993.70 allowed an attacker who convinced a us…
-
Unscored —
Inappropriate implementation in Navigation in Google Chrome prior to 118.0.5993.70 allowed a remote attacker to spoof s…