Category
Browsers
10,973 known vulnerabilities.
10,973 results · Feed
-
Unscored —
Heap buffer overflow in fingerprint recognition in Google Chrome on ChromeOS prior to 96.0.4664.45 allowed a remote att…
-
Unscored —
Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corru…
-
Unscored —
Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially ex…
-
Unscored —
Inappropriate implementation in service workers in Google Chrome prior to 96.0.4664.45 allowed a remote attacker who ha…
-
Unscored —
Inappropriate implementation in cache in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to leak cross-or…
-
Unscored —
Use after free in media in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap co…
-
Unscored —
Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corru…
-
Unscored —
Use after free in storage foundation in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially ex…
-
Unscored —
Use after free in loader in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap c…
-
High 7.8
A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Sol…
-
High 7.8
A vulnerability has been identified in JT Open (All versions < V11.1.1.0), JT Utilities (All versions < V13.1.1.0), Sol…
-
Unscored —
A vulnerability has been identified in SINUMERIK Edge (All versions < V3.2). The affected software does not properly va…
-
Unscored —
The iframe sandbox rules were not correctly applied to XSLT stylesheets, allowing an iframe to bypass restrictions such…
-
Unscored —
When interacting with an HTML input element's file picker dialog with webkitdirectory set, a use-after-free could have …
-
Unscored —
Microsoft introduced a new feature in Windows 10 known as Cloud Clipboard which, if enabled, will record data copied to…
-
Unscored —
Through a series of navigations, Firefox could have entered fullscreen mode without notification or warning to the user…
-
Unscored —
The Opportunistic Encryption feature of HTTP2 (RFC 8164) allows a connection to be transparently upgraded to TLS while …
-
Unscored —
By displaying a form validity message in the correct location at the same time as a permission prompt (such as for geol…
-
Unscored —
Due to an unusual sequence of attacker-controlled events, a Javascript alert() dialog with arbitrary (although unstyled…
-
Unscored —
The executable file warning was not presented when downloading .inetloc files, which, due to a flaw in Mac OS, can run …
-
Unscored —CVE-2021-43530 Public exploit
A Universal XSS vulnerability was present in Firefox for Android resulting from improper sanitization when processing a…
-
Unscored —
When a user loaded a Web Extensions context menu, the Web Extension could access the post-redirect URL of the element c…
-
Unscored —
The 'Copy Image Link' context menu action would copy the final image URL after redirects. By embedding an image that tr…
-
Unscored —
When parsing internationalized domain names, high bits of the characters in the URLs were sometimes stripped, resulting…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 93 and Firefox ESR 91.2. Some o…
-
Unscored —
A use-after-free could have occured when an HTTP2 session object was released on a different thread, leading to memory …
-
Unscored —
Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. T…
-
Unscored —
An incorrect type conversion of sizes from 64bit to 32bit integers allowed an attacker to corrupt memory leading to a p…
-
Unscored —
By misusing a race in our notification code, an attacker could have forcefully hidden the notification for pages that h…
-
Unscored —
Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within …
-
Unscored —
WebExtensions with the correct permissions were able to create and install ServiceWorkers for third-party websites that…
-
Unscored —
When invoking protocol handlers for external protocols, a supplied parameter URL containing spaces was not properly esc…
-
Unscored —
Using XMLHttpRequest, an attacker could have identified installed applications by probing error messages for loading ex…
-
Unscored —
Documents loaded with the CSP sandbox directive could have escaped the sandbox's script restriction by embedding additi…
-
Unscored —
When receiving a URL through a SEND intent, Firefox would have searched for the text, but subsequent usages of the addr…
-
Unscored —
Using the Location API in a loop could have caused severe application hangs and crashes. This vulnerability affects Thu…
-
Unscored —
It was possible to recreate previous cursor spoofing attacks against users with a zoomed native cursor. This vulnerabil…
-
Medium 5.3
Process memory exposure in Zoom Client and other products
A vulnerability was discovered in the Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for intune (for And…
-
High 7.3
Buffer overflow in Zoom client and other products
A buffer overflow vulnerability was discovered in Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.8.4, Zoom Client for Meetings for Blackberry (for Android and iOS) before version 5.8.1, Zoom Client for Meetings for int…
-
Medium 4.2
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability