Tra cứu CVE

Mọi CVE đã công bố cùng các advisory mã nguồn mở (NVD, OSV, GitHub), kèm CVSS, EPSS và cho biết lỗ hổng có đang bị khai thác thực tế hay không (CISA KEV). Cập nhật mỗi vài giờ. Các bài quét đối chiếu dữ liệu này với công nghệ phát hiện được trên site.

403.461 lỗ hổng · 1.767 đang bị khai thác (CISA KEV)

edge chromium ✕Xoá bộ lọc

323 kết quả

Mã	Mức độ	Mô tả	Công bố
CVE-2021-21157	CAO8.8	Use after free in Web Sockets in Google Chrome on Linux prior to 88.0.4324.182 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	22/02/2021
CVE-2021-21139	TRUNG BÌNH6.5	Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.	09/02/2021
CVE-2021-21137	TRUNG BÌNH6.5	Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.	09/02/2021
CVE-2021-21136	TRUNG BÌNH6.5	Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	09/02/2021
CVE-2021-21135	TRUNG BÌNH6.5	Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.	09/02/2021
CVE-2021-21134	TRUNG BÌNH6.5	Incorrect security UI in Page Info in Google Chrome on iOS prior to 88.0.4324.96 allowed a remote attacker to spoof security UI via a crafted HTML page.	09/02/2021
CVE-2021-21133	TRUNG BÌNH6.5	Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.	09/02/2021
CVE-2021-21132	NGHIÊM TRỌNG9.6	Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.	09/02/2021
CVE-2021-21131	TRUNG BÌNH6.5	Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.	09/02/2021
CVE-2021-21130	TRUNG BÌNH6.5	Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.	09/02/2021
CVE-2021-21129	TRUNG BÌNH6.5	Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.	09/02/2021
CVE-2021-21128	CAO8.8	Heap buffer overflow in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	09/02/2021
CVE-2021-21127	CAO8.8	Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass content security policy via a crafted Chrome Extension.	09/02/2021
CVE-2021-21126	TRUNG BÌNH6.5	Insufficient policy enforcement in extensions in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass site isolation via a crafted Chrome Extension.	09/02/2021
CVE-2021-21125	CAO8.1	Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.	09/02/2021
CVE-2021-21124	NGHIÊM TRỌNG9.6	Potential user after free in Speech Recognizer in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.	09/02/2021
CVE-2021-21123	TRUNG BÌNH6.5	Insufficient data validation in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.	09/02/2021
CVE-2021-21122	CAO8.8	Use after free in Blink in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	09/02/2021
CVE-2021-21121	NGHIÊM TRỌNG9.6	Use after free in Omnibox in Google Chrome on Linux prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.	09/02/2021
CVE-2021-21120	CAO8.8	Use after free in WebSQL in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.	09/02/2021