Page 3 of 147 results (0.006 seconds)

CVSS: 8.8EPSS: 2%CPEs: 11EXPL: 1

CVE-2020-6382 – chromium-browser: Type Confusion in JavaScript

https://notcve.org/view.php?id=CVE-2020-6382

11 Feb 2020 — Type confusion in JavaScript in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Una confusión de tipos en JavaScript en Google Chrome versiones anteriores a 80.0.3987.87, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 80.0.3987.87. Issues addressed include infor... • http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html • CWE-843: Access of Resource Using Incompatible Type ('Type Confusion') •

CVSS: 8.8EPSS: 1%CPEs: 10EXPL: 1

CVE-2020-6404 – chromium-browser: Inappropriate implementation in Blink

https://notcve.org/view.php?id=CVE-2020-6404

11 Feb 2020 — Inappropriate implementation in Blink in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. La implementación inapropiada en Blink en Google Chrome versiones anteriores a 80.0.3987.87 permitió a un atacante remoto explotar potencialmente una corrupción de la pila mediante una página HTML diseñada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 80.0.3987.87. Issues addressed include... • http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html • CWE-787: Out-of-bounds Write •

CVSS: 8.8EPSS: 2%CPEs: 13EXPL: 1

CVE-2020-6381 – chromium-browser: Integer overflow in JavaScript

https://notcve.org/view.php?id=CVE-2020-6381

11 Feb 2020 — Integer overflow in JavaScript in Google Chrome on ChromeOS and Android prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Un desbordamiento de enteros en JavaScript en Google Chrome sobre ChromeOS y Android versiones anteriores a 80.0.3987.87, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromiu... • http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html • CWE-190: Integer Overflow or Wraparound •

CVSS: 8.8EPSS: 2%CPEs: 10EXPL: 0

CVE-2020-6406 – chromium-browser: Use after free in audio

https://notcve.org/view.php?id=CVE-2020-6406

11 Feb 2020 — Use after free in audio in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Un uso la memoria previamente liberada en audio en Google Chrome versiones anteriores a 80.0.3987.87, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 80.0.3987.87. Issues addressed include... • http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html • CWE-416: Use After Free •

CVSS: 6.5EPSS: 1%CPEs: 11EXPL: 1

CVE-2020-6397 – chromium-browser: Incorrect security UI in sharing

https://notcve.org/view.php?id=CVE-2020-6397

11 Feb 2020 — Inappropriate implementation in sharing in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof security UI via a crafted HTML page. Una implementación inapropiada en sharing en Google Chrome versiones anteriores a 80.0.3987.87, permitió a un atacante remoto falsificar la Interfaz de Usuario de seguridad por medio de una página HTML diseñada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 80.0.3987.87. Issues addressed include informatio... • http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html •

CVSS: 6.5EPSS: 1%CPEs: 11EXPL: 1

CVE-2020-6408 – chromium-browser: Insufficient policy enforcement in CORS

https://notcve.org/view.php?id=CVE-2020-6408

11 Feb 2020 — Insufficient policy enforcement in CORS in Google Chrome prior to 80.0.3987.87 allowed a local attacker to obtain potentially sensitive information via a crafted HTML page. Una aplicación insuficiente de la política en CORS en Google Chrome versiones anteriores a 80.0.3987.87, permitió a un atacante local obtener información potencialmente confidencial por medio de una página HTML diseñada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 80.0.3987.87. Issu... • http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html •

CVSS: 6.5EPSS: 1%CPEs: 11EXPL: 1

CVE-2020-6396 – chromium-browser: Inappropriate implementation in Skia

https://notcve.org/view.php?id=CVE-2020-6396

11 Feb 2020 — Inappropriate implementation in Skia in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Una implementación inapropiada en Skia en Google Chrome versiones anteriores a 80.0.3987.87, permitió a un atacante remoto falsificar el contenido del Omnibox (barra de URL) por medio de una página HTML diseñada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 80.0.3987.87. Issues addr... • http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html •

CVSS: 8.8EPSS: 3%CPEs: 11EXPL: 2

CVE-2020-6390 – chromium-browser: Out of bounds memory access in streams

https://notcve.org/view.php?id=CVE-2020-6390

11 Feb 2020 — Out of bounds memory access in streams in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Un acceso a la memoria fuera de límites en streams en Google Chrome versiones anteriores a 80.0.3987.87, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de una página HTML diseñada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 80.0.3987.87. Issues... • https://packetstorm.news/files/id/157419 • CWE-787: Out-of-bounds Write •

CVSS: 6.5EPSS: 1%CPEs: 11EXPL: 1

CVE-2020-6400 – chromium-browser: Inappropriate implementation in CORS

https://notcve.org/view.php?id=CVE-2020-6400

11 Feb 2020 — Inappropriate implementation in CORS in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Una implementación inapropiada en CORS en Google Chrome versiones anteriores a 80.0.3987.87, permitió a un atacante remoto filtrar datos de origen cruzado por medio de una página HTML diseñada. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 80.0.3987.87. Issues addressed include information leakage, null ... • http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html • CWE-203: Observable Discrepancy •

CVSS: 8.8EPSS: 2%CPEs: 11EXPL: 0

CVE-2020-6398 – chromium-browser: Uninitialized use in PDFium

https://notcve.org/view.php?id=CVE-2020-6398

11 Feb 2020 — Use of uninitialized data in PDFium in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Un uso de datos no inicializados en PDFium en Google Chrome versiones anteriores a 80.0.3987.87, permitió a un atacante remoto explotar potencialmente una corrupción de la pila por medio de un archivo PDF diseñado. Chromium is an open-source web browser, powered by WebKit. This update upgrades Chromium to version 80.0.3987.87. Issues addressed in... • http://lists.opensuse.org/opensuse-security-announce/2020-02/msg00015.html • CWE-908: Use of Uninitialized Resource •