Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-30480 State: PUBLISHED Published: 2021-04-09T22:03:47 Last Updated: 2024-08-03T22:32:41.055Z Severity: HIGH (CVSS 8.5 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: Zoom Chat through 2021-04-09 on Windows and macOS allows certain remote authenticated attackers to execute arbitrary code without user interaction. An attacker must be within the same organization, or an external party who has been accepted as a contact. NOTE: this is specific to the Zoom Chat software, which is different from the chat feature of the Zoom Meetings and Zoom Video Webinars software. Additional Analyst Notes: - CVE Program Container: Referenc
ature of the Zoom Meetings and Zoom Video Webinars software. Additional Analyst Notes: - CVE Program Container: References: - https://blog.malwarebytes.com/exploits-and-vulnerabilities/2021/04/zoom-zero-day-discovery-makes-calls-safer-hackers-200000-richer/ - https://twitter.com/thezdi/status/1379855435730149378 - https://twitter.com/thezdi/status/1379859851061395459 - https://zoom.us/feature/messaging - https://www.securityweek.com/200000-awarded-zero-click-zoom-exploit-pwn2own - https://www.zdnet.com/article/critical-zoom-vulnerability-triggers-remote-code-execution-without-user-input/ - https://www.zerodayinitiative.com/advisories/ZDI-21-971/ - https://explore.zoom.us/en/trust/security/se
ut-user-input/ - https://www.zerodayinitiative.com/advisories/ZDI-21-971/ - https://explore.zoom.us/en/trust/security/security-bulletin/ - https://sector7.computest.nl/post/2021-08-zoom/
CVE ID: CVE-2021-30481 State: PUBLISHED Published: 2021-04-10T18:31:34.000Z Last Updated: 2025-11-03T05:30:21.447Z Severity: HIGH (CVSS 8 CVSS:3.1/AC:H/AV:N/A:H/C:H/I:H/PR:L/S:C/UI:R) Vendors: n/a Products: n/a Problem Types: n/a Description: Valve Steam before 2021-04-17, when a Source engine game is installed, allows remote authenticated users to execute arbitrary code because of a buffer overflow that occurs for a Steam invite after one click. Additional Analyst Notes: - CVE Program Container: References: - https://twitter.com/the_secret_club/status/1380868759129296900 - https://www.youtube.com/watch?v=rNQn--9xR1Q - https://news.ycombinator.com/item?id=26762170 - https://twitter.com/floes
https://www.youtube.com/watch?v=rNQn--9xR1Q - https://news.ycombinator.com/item?id=26762170 - https://twitter.com/floesen_/status/1337107178096881666
CVE ID: CVE-2021-30482 State: PUBLISHED Published: 2021-05-11T12:16:27 Last Updated: 2024-08-03T22:32:41.101Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains UpSource before 2020.1.1883, application passwords were not revoked correctly Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-30483 State: PUBLISHED Published: 2021-07-27T18:21:30 Last Updated: 2024-08-03T22:32:41.125Z Vendors: n/a Products: n/a Problem Types: n/a Description: isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository. Additional Analyst Notes: - CVE Program Container: References: - https://vuln.ryotak.me/advisories/28 - https://github.com/isomorphic-git/isomorphic-git/releases/tag/v1.8.2 - https://github.com/isomorphic-git/isomorphic-git/pull/1339
CVE ID: CVE-2021-30485 State: PUBLISHED Published: 2021-04-11T15:06:17 Last Updated: 2024-08-03T22:32:41.081Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in libezxml.a in ezXML 0.8.6. The function ezxml_internal_dtd(), while parsing a crafted XML file, performs incorrect memory handling, leading to a NULL pointer dereference while running strcmp() on a NULL pointer. Additional Analyst Notes: - CVE Program Container: References: - https://sourceforge.net/p/ezxml/bugs/25/ - https://lists.debian.org/debian-lts-announce/2021/07/msg00005.html
CVE ID: CVE-2021-30486 State: PUBLISHED Published: 2021-07-22T11:54:57 Last Updated: 2024-08-03T22:32:41.132Z Vendors: n/a Products: n/a Problem Types: n/a Description: SysAid 20.3.64 b14 is affected by Blind and Stacker SQL injection via AssetManagementChart.jsp (GET computerID), AssetManagementChart.jsp (POST group1), AssetManagementList.jsp (GET computerID or group1), or AssetManagementSummary.jsp (GET group1). Additional Analyst Notes: - CVE Program Container: References: - https://eh337.net/2021/04/10/sysaid-ii/
CVE ID: CVE-2021-30487 State: PUBLISHED Published: 2021-04-14T23:43:01 Last Updated: 2024-08-03T22:32:41.139Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the topic moving API in Zulip Server 3.x before 3.4, organization administrators were able to move messages to streams in other organizations hosted by the same Zulip installation. Additional Analyst Notes: - CVE Program Container: References: - https://blog.zulip.com/2021/04/14/zulip-server-3-4/
CVE ID: CVE-2021-30490 State: PUBLISHED Published: 2022-08-16T12:32:01 Last Updated: 2024-08-03T22:32:41.099Z Vendors: n/a Products: n/a Problem Types: n/a Description: upsMonitor in ViewPower (aka ViewPowerHTML) 1.04-21012 through 1.04-21353 has insecure permissions for the service binary that enable an Authenticated User to modify files, allowing for privilege escalation. Additional Analyst Notes: - CVE Program Container: References: - https://www.power-software-download.com/viewpower.html - https://www.0x90.zone/binary/reverse/exploitation/2020/08/16/Privilege-Escalation-ViewPower.html
CVE ID: CVE-2021-30493 State: PUBLISHED Published: 2021-04-14T14:49:47 Last Updated: 2024-08-03T22:32:41.118Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the ChromaBroadcast subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other words, an attacker can create a file in an unintended directory (with some limitations). Additional Analyst Notes: - CVE Program Container: References: - https://versprite.com/security-resources/ - https://versprite.com/blog/security-
- CVE Program Container: References: - https://versprite.com/security-resources/ - https://versprite.com/blog/security-research/razer-synapse-3-security-vulnerability-analysis-report/ - https://versprite.com/advisories/razer-synapse-3-cve-2021-30493/
CVE ID: CVE-2021-30494 State: PUBLISHED Published: 2021-04-14T14:50:52 Last Updated: 2024-08-03T22:32:41.151Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple system services installed alongside the Razer Synapse 3 software suite perform privileged operations on entries within the Razer Chroma SDK subkey. These privileged operations consist of file name concatenation of a runtime log file that is used to store runtime log information. In other words, an attacker can create a file in an unintended directory (with some limitations). Additional Analyst Notes: - CVE Program Container: References: - https://versprite.com/security-resources/ - https://versprite.com/blog/security
: - CVE Program Container: References: - https://versprite.com/security-resources/ - https://versprite.com/blog/security-research/razer-synapse-3-security-vulnerability-analysis-report/ - https://versprite.com/advisories/razer-synapse-3-1/
CVE ID: CVE-2021-30496 State: PUBLISHED Published: 2021-04-20T00:00:00 Last Updated: 2024-08-03T22:32:41.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Telegram app 7.6.2 for iOS allows remote authenticated users to cause a denial of service (application crash) if the victim pastes an attacker-supplied message (e.g., in the Persian language) into a channel or group. The crash occurs in MtProtoKitFramework. NOTE: the vendor's perspective is that "this behavior can't be considered a vulnerability." Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gist.github.com/raminfp/bf64c2974ee6949787329749148a4b31 - https://t.me/joincha
Program Container: References: - https://gist.github.com/raminfp/bf64c2974ee6949787329749148a4b31 - https://t.me/joinchat/bJ9cnUosVh03ZTI0
CVE ID: CVE-2021-30497 State: PUBLISHED Published: 2022-04-06T01:22:07 Last Updated: 2024-08-03T22:32:41.103Z Vendors: n/a Products: n/a Problem Types: n/a Description: Ivanti Avalanche (Premise) 6.3.2 allows remote unauthenticated users to read arbitrary files via Absolute Path Traversal. The imageFilePath parameter processed by the /AvalancheWeb/image endpoint is not verified to be within the scope of the image folder, e.g., the attacker can obtain sensitive information via the C:/Windows/system32/config/system.sav value. Additional Analyst Notes: - CVE Program Container: References: - https://help.ivanti.com/wl/help/en_us/aod/5.4/Avalanche/Console/Launching_the_Avalanche.htm - https://ssd
References: - https://help.ivanti.com/wl/help/en_us/aod/5.4/Avalanche/Console/Launching_the_Avalanche.htm - https://ssd-disclosure.com/ssd-advisory-ivanti-avalanche-directory-traversal/ - https://forums.ivanti.com/s/article/Security-Alert-CVE-2021-30497-Directory-Traversal-Vulnerability?language=en_US
CVE ID: CVE-2021-30498 State: PUBLISHED Published: 2021-05-26T00:00:00.000Z Last Updated: 2025-11-03T19:25:45.270Z Vendors: n/a Products: libcaca Problem Types: CWE-787 Description: A flaw was found in libcaca. A heap buffer overflow in export.c in function export_tga might lead to memory corruption and other potential consequences. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/cacalabs/libcaca/issues/53 - https://bugzilla.redhat.com/show_bug.cgi?id=1948675 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - https://lists.fedoraproject.org/archives/list/package-announce%40
roject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00004.html
CVE ID: CVE-2021-30499 State: PUBLISHED Published: 2021-05-26T23:50:10.000Z Last Updated: 2025-11-03T19:25:46.633Z Vendors: n/a Products: libcaca Problem Types: CWE-119 Description: A flaw was found in libcaca. A buffer overflow of export.c in function export_troff might lead to memory corruption and other potential consequences. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1948679 - https://github.com/cacalabs/libcaca/issues/54 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lis
ect.org/message/6WFGYICNTMNDNMDDUV4G2RYFB5HNJCOV/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PC7EGOEQ5C4OD66ZUJJIIYEXBTZOCMZX/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZSBCRN6EGQJUVOSD4OEEQ6XORHEM2CUL/ - https://lists.debian.org/debian-lts-announce/2024/04/msg00004.html
CVE ID: CVE-2021-30500 State: PUBLISHED Published: 2021-05-26T23:51:50 Last Updated: 2024-08-03T22:32:41.094Z Vendors: n/a Products: upx Problem Types: CWE-476 Description: Null pointer dereference was found in upx PackLinuxElf::canUnpack() in p_lx_elf.cpp,in version UPX 4.0.0. That allow attackers to execute arbitrary code and cause a denial of service via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1948692 - https://github.com/upx/upx/issues/485 - https://github.com/upx/upx/commit/90279abdfcd235172eab99651043051188938dcc
CVE ID: CVE-2021-30501 State: PUBLISHED Published: 2021-05-26T23:54:30 Last Updated: 2024-08-03T22:32:41.143Z Vendors: n/a Products: upx Problem Types: CWE-20 Description: An assertion abort was found in upx MemBuffer::alloc() in mem.cpp, in version UPX 4.0.0. The flow allows attackers to cause a denial of service (abort) via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=1948696 - https://github.com/upx/upx/issues/486 - https://github.com/upx/upx/pull/487 - https://github.com/upx/upx/commit/28e761cd42211dfe0124b7a29b2f74730f453e46
CVE ID: CVE-2021-30502 State: PUBLISHED Published: 2021-04-25T02:55:10 Last Updated: 2024-08-03T22:32:41.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unofficial vscode-ghc-simple (aka Simple Glasgow Haskell Compiler) extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dramforever/vscode-ghc-simple/releases - https://vuln.ryotak.me/advisories/38 - https://github.com/dramforever/vscode-ghc-simple/blob/master/CHANGELOG.md#v023 - https://github.com/dramforever/vscode-ghc-simple/commit/bc7f6f0b857dade46ea51496d8bd
ple/blob/master/CHANGELOG.md#v023 - https://github.com/dramforever/vscode-ghc-simple/commit/bc7f6f0b857dade46ea51496d8bd1a4edef39b46
CVE ID: CVE-2021-30503 State: PUBLISHED Published: 2021-04-13T01:15:24 Last Updated: 2024-08-03T22:32:41.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: The unofficial GLSL Linting extension before 1.4.0 for Visual Studio Code allows remote code execution via a crafted glslangValidatorPath in the workspace configuration. Additional Analyst Notes: - CVE Program Container: References: - https://vuln.ryotak.me/advisories/27 - https://github.com/hsimpson/vscode-glsllint/commit/3effba525bdff7d4257e66a6815ff956d2bce8ac - https://marketplace.visualstudio.com/items/CADENAS.vscode-glsllint/changelog#:~:text=1.4.x
CVE ID: CVE-2021-30504 State: PUBLISHED Published: 2021-05-11T11:32:37 Last Updated: 2024-08-03T22:32:41.122Z Vendors: n/a Products: n/a Problem Types: n/a Description: In JetBrains IntelliJ IDEA before 2021.1, DoS was possible because of unbounded resource allocation. Additional Analyst Notes: - CVE Program Container: References: - https://blog.jetbrains.com - https://blog.jetbrains.com/blog/2021/05/07/jetbrains-security-bulletin-q1-2021/
CVE ID: CVE-2021-30506 State: PUBLISHED Published: 2021-06-04T17:15:32 Last Updated: 2024-08-03T22:32:41.129Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Web App Installs in Google Chrome on Android prior to 90.0.4430.212 allowed an attacker who convinced a user to install a web application to inject scripts or HTML into a privileged page via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1180126 - https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list
nel-update-for-desktop.html - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE ID: CVE-2021-30507 State: PUBLISHED Published: 2021-06-04T17:15:33 Last Updated: 2024-08-03T22:32:41.123Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Offline in Google Chrome on Android prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html - https://crbug.com/1178202 - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40li
78202 - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE ID: CVE-2021-30508 State: PUBLISHED Published: 2021-06-04T17:15:34 Last Updated: 2024-08-03T22:32:41.100Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html - https://crbug.com/1195340 - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40
1195340 - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE ID: CVE-2021-30509 State: PUBLISHED Published: 2021-06-04T17:15:34 Last Updated: 2024-08-03T22:32:41.131Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Out of bounds write in Tab Strip in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory write via a crafted HTML page and a crafted Chrome extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html - https://crbug.com/1196309 - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives
html - https://crbug.com/1196309 - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE ID: CVE-2021-30510 State: PUBLISHED Published: 2021-06-04T17:15:35 Last Updated: 2024-08-03T22:32:41.068Z Vendors: Google Products: Chrome Problem Types: Race Description: Use after free in Aura in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html - https://crbug.com/1197436 - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/ - https://lists
t.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE ID: CVE-2021-30511 State: PUBLISHED Published: 2021-06-04T17:15:36 Last Updated: 2024-08-03T22:32:41.292Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in Tab Groups in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to install a malicious extension to perform an out of bounds memory read via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html - https://crbug.com/1197875 - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fe
- https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE ID: CVE-2021-30512 State: PUBLISHED Published: 2021-06-04T17:15:36 Last Updated: 2024-08-03T22:32:41.119Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Notifications in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html - https://crbug.com/1200019 - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.o
urity.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE ID: CVE-2021-30513 State: PUBLISHED Published: 2021-06-04T17:15:37 Last Updated: 2024-08-03T22:32:41.132Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html - https://crbug.com/1200490 - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/ - https
raproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE ID: CVE-2021-30514 State: PUBLISHED Published: 2021-06-04T17:15:38 Last Updated: 2024-08-03T22:32:41.127Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Autofill in Google Chrome prior to 90.0.4430.212 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html - https://crbug.com/1200766 - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/me
.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ETMZL6IHCTCTREEL434BQ4THQ7EOHJ43/
CVE ID: CVE-2021-30515 State: PUBLISHED Published: 2021-06-04T17:15:38 Last Updated: 2024-08-03T22:32:41.209Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in File API in Google Chrome prior to 90.0.4430.212 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/05/stable-channel-update-for-desktop.html - https://crbug.com/1201073 - https://security.gentoo.org/glsa/202107-06 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PAT6EOXVQFE6JFMFQF4IKAOUQSHMHL54/ -