Category

Browsers

10,973 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

10,973 results · Feed

High 7.5

CVE-2020-0812

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0811.

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows Server 2019 Windows Browsers NuGet

Mar 12, 2020
High 7.5

CVE-2020-0811

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge (HTML-based)L, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0812.

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems Windows Browsers NuGet

Mar 12, 2020
High 7.5

CVE-2020-0768

Out-of-bounds write in ChakraCore

A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0823, CVE-2020-0825, CVE-2020-0826, CVE-2…

Microsoft ChakraCore Internet Explorer 11 Internet Explorer 11 on Windows 10 Version 1903 for x64-based Systems Windows Browsers NuGet

Mar 12, 2020
Unscored —

CVE-2020-6796

A content process could have modified shared memory relating to crash reporting information, crash itself, and cause an…

Mozilla Firefox mozjs38 mozjs52 Browsers Debian Ubuntu Alpine

Mar 2, 2020
Unscored —

CVE-2020-6801

Mozilla developers reported memory safety bugs present in Firefox 72. Some of these bugs showed evidence of memory corr…

Mozilla Firefox firefox Browsers Ubuntu

Mar 2, 2020
Unscored —

CVE-2020-6797

By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on…

Mozilla Firefox Thunderbird firefox-esr Browsers Alpine

Mar 2, 2020
Unscored —

CVE-2020-6798

If a template tag was used in a select tag, the parser could be confused and allow JavaScript parsing and execution whe…

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Alpine

Mar 2, 2020
Unscored —

CVE-2020-6800

Mozilla developers and community members reported memory safety bugs present in Firefox 72 and Firefox ESR 68.4. Some o…

Mozilla Firefox Thunderbird thunderbird Browsers Debian Ubuntu Alpine

Mar 2, 2020
Unscored —

CVE-2020-6799

Command line arguments could have been injected during Firefox invocation as a shell handler for certain unsupported fi…

Mozilla Firefox firefox-esr Browsers Alpine

Mar 2, 2020
High 8.8

CVE-2019-17026 Exploited Public exploit EPSS 46%

Incorrect alias information in IonMonkey JIT compiler for setting array elements could lead to a type confusion. We are…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu Alpine

Mar 2, 2020
KEV Nov 3, 2021
High 8.8

CVE-2020-6418 Exploited Public exploit EPSS 79%

Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 27, 2020
KEV Nov 3, 2021
Unscored —

CVE-2020-6386

Use after free in speech in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-6407

Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-6383

Type confusion in V8 in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit heap corr…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-6384

Use after free in WebAudio in Google Chrome prior to 80.0.3987.116 allowed a remote attacker to potentially exploit hea…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3862

A denial of service issue was addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3865

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3867

A logic issue was addressed with improved state management. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 1…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3868

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…

Apple tvOS Safari iOS Windows iOS Browsers Debian Ubuntu

Feb 27, 2020
Unscored —

CVE-2020-3825

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and i…

Apple tvOS Safari iOS Windows iOS Browsers

Feb 27, 2020
Unscored —

CVE-2020-3841

The issue was addressed with improved UI handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, Safari 13.0.5. …

Apple Safari iOS iOS Browsers

Feb 27, 2020
Unscored —

CVE-2020-3833

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in Safari 13.0.5…

Apple Safari Browsers

Feb 27, 2020
Unscored —

CVE-2013-5594

Mozilla Firefox before 25 allows modification of anonymous content of pluginProblem.xml binding

Mozilla Firefox Browsers

Feb 18, 2020
Unscored —

CVE-2019-5322

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 38…

Browsers

Feb 12, 2020
High 7.5

CVE-2020-0767 EPSS 18%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows Server 2019 Windows Browsers NuGet

Feb 11, 2020
High 7.5

CVE-2020-0713 EPSS 10%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for 32-bit Systems Windows Browsers NuGet

Feb 11, 2020
High 7.5

CVE-2020-0712 EPSS 10%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems Windows Browsers NuGet

Feb 11, 2020
High 7.5

CVE-2020-0711 EPSS 10%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0710, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for ARM64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for x64-based Systems Windows Browsers NuGet

Feb 11, 2020
High 7.5

CVE-2020-0710 EPSS 10%

ChakraCore RCE Vulnerability

A remote code execution vulnerability exists in the way that the ChakraCore scripting engine handles objects in memory, aka 'Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2020-0673, CVE-2020-0674, CVE-2020-0711, CVE-2020-07…

Microsoft ChakraCore Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for ARM64-based Systems Windows Browsers NuGet

Feb 11, 2020
Unscored —

CVE-2020-0706

An information disclosure vulnerability exists in the way that affected Microsoft browsers handle cross-origin requests…

Microsoft Internet Explorer 11 Internet Explorer 10 Internet Explorer 11 on Windows 10 Version 1903 for 32-bit Systems Windows Browsers

Feb 11, 2020
Unscored —

CVE-2020-0663

An elevation of privilege vulnerability exists when Microsoft Edge does not properly enforce cross-domain policies, whi…

Microsoft Microsoft Edge (EdgeHTML-based) on Windows Server 2019 Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1903 for x64-based Systems Microsoft Edge (EdgeHTML-based) on Windows 10 Version 1809 for 32-bit Systems Windows Browsers

Feb 11, 2020
Unscored —

CVE-2020-6415

Inappropriate implementation in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentia…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 11, 2020
Unscored —

CVE-2020-6416

Insufficient data validation in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 11, 2020
Unscored —

CVE-2020-6417

Inappropriate implementation in installer in Google Chrome prior to 80.0.3987.87 allowed a local attacker to execute ar…

Google Chrome chromium-browser Browsers Ubuntu

Feb 11, 2020
Unscored —

CVE-2020-6414

Insufficient policy enforcement in Safe Browsing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to by…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 11, 2020
Unscored —

CVE-2020-6412

Insufficient validation of untrusted input in Omnibox in Google Chrome prior to 80.0.3987.87 allowed a remote attacker …

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 11, 2020
Unscored —

CVE-2020-6413

Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to bypass HTML v…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 11, 2020
Unscored —

CVE-2020-6408

Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain poten…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 11, 2020
Unscored —

CVE-2020-6387

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit h…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 11, 2020
Unscored —

CVE-2020-6396

Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the cont…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Feb 11, 2020