Category
Browsers
10,973 known vulnerabilities.
10,973 results · Feed
-
Unscored —
Insufficient data validation in extensions in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to disable …
-
Unscored —
IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via…
-
Unscored —
IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via…
-
Unscored —
IDN spoofing in Omnibox in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform domain spoofing via…
-
Unscored —
Insufficient filtering in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass multiple fil…
-
Unscored —
Insufficient data validation in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to lea…
-
Unscored —
Incorrect data validation in navigation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof the c…
-
Unscored —
Inappropriate implementation in Omnibox in Google Chrome on iOS prior to 77.0.3865.75 allowed a remote attacker to spoo…
-
Unscored —
UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a c…
-
Unscored —
Insufficient policy enforcement in navigations in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypa…
-
Unscored —
Insufficient policy enforcement in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform…
-
Unscored —
Insufficient policy enforcement in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to bypass con…
-
Unscored —
Insufficient policy enforcement in site isolation in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to b…
-
Unscored —
Information leak in storage in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to leak cross-origin data …
-
Unscored —
Insufficient policy enforcement in developer tools in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to …
-
Unscored —
UI spoofing in Chromium in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof notifications via a c…
-
Unscored —
Insufficient data validation in JavaScript in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to potentia…
-
Unscored —
UI spoofing in Blink in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to spoof security UI via a crafte…
-
Unscored —
Incorrect data validation in downloads in Google Chrome prior to 77.0.3865.75 allowed a remote attacker to perform doma…
-
Unscored —
Multiple unspecified vulnerabilities in Google Chrome before 55.0.2883.75.
-
Unscored —
Unspecified vulnerabilities in Google Chrome before 54.0.2840.59.
-
Unscored —
WebKit in Google Chrome before Blink M11 and M12 does not properly handle counter nodes, which allows remote attackers …
-
Unscored —
An issue exists in third_party/WebKit/Source/WebCore/svg/animation/SVGSMILElement.h in WebKit in Google Chrome before B…
-
Unscored —
Use after free vulnerability exists in WebKit in Google Chrome before Blink M12 in RenderLayerwhen removing elements wi…
-
Unscored —
A double-free vulnerability exists in WebKit in Google Chrome before Blink M12 in the WebCore::CSSSelector function.
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —
A remote code execution vulnerability exists in the way that the scripting engine handles objects in memory in Microsof…
-
Unscored —
A security feature bypass vulnerability exists when Microsoft Edge improperly handles extension requests and fails to r…
-
Unscored —
An issue exists in WebKit in Google Chrome before Blink M12. when clearing lists in AnimationControllerPrivate that sig…
-
Unscored —
A wrong type is used for a return value from strlen in WebKit in Google Chrome before Blink M12 on 64-bit platforms.
-
Unscored —
Use after free vulnerability in documentloader in WebKit in Google Chrome before Blink M13 in DocumentWriter::replaceDo…
-
Unscored —
Incorrect handling of timer information in Timer.cpp in WebKit in Google Chrome before Blink M13.
-
Unscored —
A stale layout root is set as an input element in WebKit in Google Chrome before Blink M13 when a child of a keygen wit…
-
Unscored —
On BIG-IP 13.1.0-13.1.3.1, 12.1.0-12.1.5, and 11.5.2-11.6.5.1, a reflected cross-site scripting (XSS) vulnerability exi…
-
Unscored —
browser/extensions/api/dial/dial_registry.cc in Google Chrome before 54.0.2840.98 on macOS, before 54.0.2840.99 on Wind…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2…
-
Unscored —
An information disclosure vulnerability exists when Microsoft Edge based on Edge HTML improperly handles objects in mem…
-
Unscored —
A spoofing vulnerability exists when Microsoft Browsers improperly handle browser cookies, aka 'Microsoft Browser Spoof…
-
High 7.5
Out-of-bounds write
A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka 'Chakra Scripting Engine Memory Corruption Vulnerability'. This CVE ID is unique from CVE-2019-1307, CVE-2019-1308, CVE-2…