Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-4038 State: PUBLISHED Published: 2021-12-09T15:55:17 Last Updated: 2024-08-03T17:16:03.446Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: McAfee,LLC Products: McAfee Network Security Manager (NSM) Problem Types: CWE-79 Description: Cross Site Scripting (XSS) vulnerability in McAfee Network Security Manager (NSM) prior to 10.1 Minor 7 allows a remote authenticated administrator to embed a XSS in the administrator interface via specially crafted custom rules containing HTML. NSM did not correctly sanitize custom rule content in all scenarios. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/ind
t in all scenarios. Additional Analyst Notes: - CVE Program Container: References: - https://kc.mcafee.com/corporate/index?page=content&id=SB10375
CVE ID: CVE-2021-4039 State: PUBLISHED Published: 2022-03-01T06:40:09 Last Updated: 2024-08-03T17:16:03.702Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: NWA1100-NH firmware Problem Types: CWE-78 Description: A command injection vulnerability in the web interface of the Zyxel NWA-1100-NH firmware could allow an attacker to execute arbitrary OS commands on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.zyxel.com/support/OS-command-injection-vulnerability-of-NWA1100-NH-access-point.shtml - http://packetstormsecurity.com/files/166752/Zyxel-NWA-1100-NH-Command-Injection.html
CVE ID: CVE-2021-4040 State: PUBLISHED Published: 2022-08-24T15:13:07 Last Updated: 2024-08-03T17:16:03.705Z Vendors: n/a Products: AMQ Broker Problem Types: CWE-400 Description: A flaw was found in AMQ Broker. This issue can cause a partial interruption to the availability of AMQ Broker via an Out of memory (OOM) condition. This flaw allows an attacker to partially disrupt availability to the broker through a sustained attack of maliciously crafted messages. The highest threat from this vulnerability is system availability. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2028254 - https://access.redhat.com/security/cve/CVE-2021-40
: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2028254 - https://access.redhat.com/security/cve/CVE-2021-4040 - https://issues.apache.org/jira/browse/ARTEMIS-3593 - https://github.com/apache/activemq-artemis/pull/3871/commits
CVE ID: CVE-2021-4041 State: PUBLISHED Published: 2022-08-24T15:11:13 Last Updated: 2024-08-03T17:16:03.408Z Vendors: n/a Products: ansible-runner Problem Types: CWE-20 Description: A flaw was found in ansible-runner. An improper escaping of the shell command, while calling the ansible_runner.interface.run_command, can lead to parameters getting executed as host's shell command. A developer could unintentionally write code that gets executed in the host rather than the virtual environment. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2028074 - https://access.redhat.com/security/cve/CVE-2021-4041 - https://github.com/ansible/ansi
hat.com/show_bug.cgi?id=2028074 - https://access.redhat.com/security/cve/CVE-2021-4041 - https://github.com/ansible/ansible-runner/commit/3533f265f4349a3f2a0283158cd01b59a6bbc7bd
CVE ID: CVE-2021-4042 State: REJECTED Published: 2022-08-25T17:23:35 Last Updated: 2022-08-25T17:23:35 Description: No description available.
CVE ID: CVE-2021-4043 State: PUBLISHED Published: 2022-02-04T00:00:00 Last Updated: 2024-11-08T04:55:06.687Z Severity: MEDIUM (CVSS 5.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L) Vendors: gpac Products: gpac/gpac Problem Types: CWE-476 Description: NULL Pointer Dereference in GitHub repository gpac/gpac prior to 1.1.0. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://huntr.dev/bounties/d7a534cb-df7a-48ba-8ce3-46b1551a9c47 - https://github.com/gpac/gpac/commit/64a2e1b799352ac7d7aad1989bc06e7b0f2b01db - https://www.debian.org/security/2023/dsa-5411
CVE ID: CVE-2021-4044 State: PUBLISHED Published: 2021-12-14T18:40:11.901374Z Last Updated: 2024-09-17T03:17:39.603Z Vendors: OpenSSL Products: OpenSSL Problem Types: Invalid error handling Description: Internally libssl in OpenSSL calls X509_verify_cert() on the client side to verify a certificate supplied by a server. That function may return a negative return value to indicate an internal error (for example out of memory). Such a negative return value is mishandled by OpenSSL and will cause an IO function (such as SSL_connect() or SSL_do_handshake()) to not indicate success and a subsequent call to SSL_get_error() to return the value SSL_ERROR_WANT_RETRY_VERIFY. This return value is only
ess and a subsequent call to SSL_get_error() to return the value SSL_ERROR_WANT_RETRY_VERIFY. This return value is only supposed to be returned by OpenSSL if the application has previously called SSL_CTX_set_cert_verify_callback(). Since most applications do not do this the SSL_ERROR_WANT_RETRY_VERIFY return value from SSL_get_error() will be totally unexpected and applications may not behave correctly as a result. The exact behaviour will depend on the application but it could result in crashes, infinite loops or other similar incorrect responses. This issue is made more serious in combination with a separate bug in OpenSSL 3.0 that will cause X509_verify_cert() to indicate an internal erro
erious in combination with a separate bug in OpenSSL 3.0 that will cause X509_verify_cert() to indicate an internal error when processing a certificate chain. This will occur where a certificate does not include the Subject Alternative Name extension but where a Certificate Authority has enforced name constraints. This issue can occur even with valid chains. By combining the two issues an attacker could induce incorrect, application dependent behaviour. Fixed in OpenSSL 3.0.1 (Affected 3.0.0). Additional Analyst Notes: - CVE Program Container: References: - https://www.openssl.org/news/secadv/20211214.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=758754966791c537ea95
ssl.org/news/secadv/20211214.txt - https://git.openssl.org/gitweb/?p=openssl.git%3Ba=commitdiff%3Bh=758754966791c537ea95241438454aa86f91f256 - https://security.netapp.com/advisory/ntap-20211229-0003/
CVE ID: CVE-2021-4045 State: PUBLISHED Published: 2022-03-07T21:58:20.102267Z Last Updated: 2024-09-17T02:57:31.688Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: TP-Link Products: Tapo C200 Problem Types: CWE-77 Description: TP-Link Tapo C200 IP camera, on its 1.1.15 firmware version and below, is affected by an unauthenticated RCE vulnerability, present in the uhttpd binary running by default as root. The exploitation of this vulnerability allows an attacker to take full control of the camera. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe-cert.es/en/early-warning/security-advisories/tp-link-tapo-c200-remote-code-ex
ontainer: References: - https://www.incibe-cert.es/en/early-warning/security-advisories/tp-link-tapo-c200-remote-code-execution-vulnerability - http://packetstormsecurity.com/files/168472/TP-Link-Tapo-c200-1.1.15-Remote-Code-Execution.html
CVE ID: CVE-2021-4046 State: PUBLISHED Published: 2022-02-11T17:40:06.100190Z Last Updated: 2024-09-17T03:33:15.052Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: TCMAN Products: GIM Problem Types: CWE-79 Description: The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be used to carry out a number of browser-based attacks including browser hijacking or theft of sensitive data. Additional Analyst Notes: - CVE Program Container: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/tcman-gim-cross-site-scripting-xss
CVE ID: CVE-2021-4047 State: PUBLISHED Published: 2022-04-11T19:38:31 Last Updated: 2024-08-03T17:16:03.305Z Vendors: n/a Products: OpenShift Problem Types: CWE-20 Description: The release of OpenShift 4.9.6 included four CVE fixes for the haproxy package, however the patch for CVE-2021-39242 was missing. This issue only affects Red Hat OpenShift 4.9. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2027881
CVE ID: CVE-2021-4048 State: PUBLISHED Published: 2021-12-08T21:24:42 Last Updated: 2024-08-03T17:16:03.570Z Vendors: n/a Products: lapack Problem Types: CWE-125 Description: An out-of-bounds read flaw was found in the CLARRV, DLARRV, SLARRV, and ZLARRV functions in lapack through version 3.10.0, as also used in OpenBLAS before version 0.3.18. Specially crafted inputs passed to these functions could cause an application using lapack to crash or possibly disclose portions of its memory. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Reference-LAPACK/lapack/pull/625 - https://github.com/Reference-LAPACK/lapack/commit/38f3eeee3108b18158409ca2a100e6fe03754781
ence-LAPACK/lapack/pull/625 - https://github.com/Reference-LAPACK/lapack/commit/38f3eeee3108b18158409ca2a100e6fe03754781 - https://github.com/JuliaLang/julia/issues/42415 - https://github.com/xianyi/OpenBLAS/commit/337b65133df174796794871b3988cd03426e6d41 - https://github.com/xianyi/OpenBLAS/commit/2be5ee3cca97a597f2ee2118808a2d5eacea050c - https://github.com/xianyi/OpenBLAS/commit/fe497efa0510466fd93578aaf9da1ad8ed4edbe7 - https://github.com/xianyi/OpenBLAS/commit/ddb0ff5353637bb5f5ad060c9620e334c143e3d7 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DROZM4M2QRKSD6FBO4BHSV2QMIRJQPHT/ - https://lists.fedoraproject.org/archives/list/package-
sts.fedoraproject.org/message/DROZM4M2QRKSD6FBO4BHSV2QMIRJQPHT/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6QFEVOCUG2UXMVMFMTU4ONJVDEHY2LW2/
CVE ID: CVE-2021-4049 State: PUBLISHED Published: 2021-12-07T10:40:10 Last Updated: 2024-08-03T17:16:02.984Z Severity: MEDIUM (CVSS 4.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-352 Description: livehelperchat is vulnerable to Cross-Site Request Forgery (CSRF) Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/62408fa4-2c16-4fcd-8b34-41fcdccb779e - https://github.com/livehelperchat/livehelperchat/commit/e7fe1aa6a087d4d21b2e8a0dadd2e08f42acbb57
CVE ID: CVE-2021-4050 State: PUBLISHED Published: 2021-12-08T10:45:12 Last Updated: 2024-08-03T17:16:03.473Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N) Vendors: livehelperchat Products: livehelperchat/livehelperchat Problem Types: CWE-79 Description: livehelperchat is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/27eb39d7-7636-4c4b-922c-a2f8fbe1ba05 - https://github.com/livehelperchat/livehelperchat/commit/0ce1dd2a13509747c240c8484228a5df8d6e03ec
CVE ID: CVE-2021-4052 State: PUBLISHED Published: 2021-12-23T00:45:34 Last Updated: 2024-08-03T17:16:03.290Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in web apps in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1267661 - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQW
s://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4053 State: PUBLISHED Published: 2021-12-23T00:45:35 Last Updated: 2024-08-03T17:16:04.095Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in UI in Google Chrome on Linux prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1267791 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-50
nounce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4054 State: PUBLISHED Published: 2021-12-23T00:45:37 Last Updated: 2024-08-03T17:16:03.459Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform domain spoofing via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1239760 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-504
ounce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4055 State: PUBLISHED Published: 2021-12-23T00:45:39 Last Updated: 2024-08-03T17:16:03.634Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in extensions in Google Chrome prior to 96.0.4664.93 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1266510 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWS
1266510 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4056 State: PUBLISHED Published: 2021-12-23T00:45:40 Last Updated: 2024-08-03T17:16:03.473Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1260939 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 -
e%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4057 State: PUBLISHED Published: 2021-12-23T00:45:41 Last Updated: 2024-08-03T17:16:03.325Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in file API in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1262183 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - http:
raproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - http://packetstormsecurity.com/files/165486/Chrome-storage-BlobURLStoreImpl-Revoke-Heap-Use-After-Free.html - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4058 State: PUBLISHED Published: 2021-12-23T00:45:43 Last Updated: 2024-08-03T17:16:03.485Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1267496 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/
age-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4059 State: PUBLISHED Published: 2021-12-23T00:45:44 Last Updated: 2024-08-03T17:16:03.701Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in loader in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1270990 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2
package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4061 State: PUBLISHED Published: 2021-12-23T00:45:46 Last Updated: 2024-08-03T17:16:03.569Z Vendors: Google Products: Chrome Problem Types: Type Confusion Description: Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1271456 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - http
lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4062 State: PUBLISHED Published: 2021-12-23T00:45:47 Last Updated: 2024-08-03T17:16:03.501Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in BFCache in Google Chrome prior to 96.0.4664.93 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1272403 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV7
/lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4063 State: PUBLISHED Published: 2021-12-23T00:45:49 Last Updated: 2024-08-03T17:16:03.708Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in developer tools in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1273176 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/ds
e-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4064 State: PUBLISHED Published: 2021-12-23T00:45:50 Last Updated: 2024-08-03T17:16:04.360Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1273197 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/secur
list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4065 State: PUBLISHED Published: 2021-12-23T00:45:51 Last Updated: 2024-08-03T17:16:04.013Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in autofill in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1273674 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046
nce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-5046 - https://security.gentoo.org/glsa/202208-25
CVE ID: CVE-2021-4066 State: PUBLISHED Published: 2021-12-23T00:45:53 Last Updated: 2024-08-03T17:16:03.538Z Vendors: Google Products: Chrome Problem Types: Integer underflow Description: Integer underflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1274499 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/security/2022/dsa-50
CVE ID: CVE-2021-4067 State: PUBLISHED Published: 2021-12-23T00:45:54 Last Updated: 2024-08-03T17:16:04.127Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in window manager in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop.html - https://crbug.com/1274641 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3W46HRT2UVHWSLZB6JZHQF6JNQWKV744/ - https://www.debian.org/secur