Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-37934 State: PUBLISHED Published: 2021-12-10T16:39:21 Last Updated: 2024-08-04T01:30:08.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Due to insufficient server-side login-attempt limit enforcement, a vulnerability in /account/login in Huntflow Enterprise before 3.10.14 could allow an unauthenticated, remote user to perform multiple login attempts for brute-force password guessing. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/andrey-lomtev/4ec9004101152ea9d0043a09d59498a6
CVE ID: CVE-2021-37935 State: PUBLISHED Published: 2021-12-10T16:37:29 Last Updated: 2024-08-04T01:30:09.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: An information disclosure vulnerability in the login page of Huntflow Enterprise before 3.10.4 could allow an unauthenticated, remote user to get information about the domain name of the configured LDAP server. An attacker could exploit this vulnerability by requesting the login page and searching for the "isLdap" JavaScript parameter in the HTML source code. Additional Analyst Notes: - CVE Program Container: References: - https://gist.github.com/andrey-lomtev/c970fb7dd022d04f5b57ad37fbedd064
CVE ID: CVE-2021-37936 State: PUBLISHED Published: 2022-11-18T00:00:00.000Z Last Updated: 2025-04-29T14:41:56.213Z Vendors: Elastic Products: Kibana Problem Types: CWE-79 Description: It was discovered that Kibana was not sanitizing document fields containing HTML snippets. Using this vulnerability, an attacker with the ability to write documents to an elasticsearch index could inject HTML. When the Discover app highlighted a search term containing the HTML, it would be rendered for the user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.elastic.co/community/security/ - https://discuss.elastic.co/t/elastic-stack-7-14-1-security-update/2
nces: - https://www.elastic.co/community/security/ - https://discuss.elastic.co/t/elastic-stack-7-14-1-security-update/283077
CVE ID: CVE-2021-37937 State: PUBLISHED Published: 2023-11-22T01:45:21.008Z Last Updated: 2024-08-04T01:30:08.934Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Elastic Products: Elasticsearch Problem Types: CWE-269 Description: An issue was found with how API keys are created with the Fleet-Server service account. When an API key is created with a service account, it is possible that the API key could be created with higher privileges than intended. Using this vulnerability, a compromised Fleet-Server service account could escalate themselves to a super-user. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/ela
elves to a super-user. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/elastic-stack-7-14-1-security-update/283077 - https://www.elastic.co/community/security
CVE ID: CVE-2021-37938 State: PUBLISHED Published: 2021-11-18T15:06:45 Last Updated: 2024-08-04T01:30:09.047Z Vendors: Elastic Products: Kibana Problem Types: CWE-269 Description: It was discovered that on Windows operating systems specifically, Kibana was not validating a user supplied path, which would load .pbf files. Because of this, a malicious user could arbitrarily traverse the Kibana host to load internal files ending in the .pbf extension. Thanks to Dominic Couture for finding this vulnerability. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/kibana-7-15-2-security-update/288923
CVE ID: CVE-2021-37939 State: PUBLISHED Published: 2021-11-18T15:09:27 Last Updated: 2024-08-04T01:30:09.049Z Vendors: Elastic Products: Kibana Problem Types: CWE-200 Description: It was discovered that Kibana’s JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from public view. Using this vulnerability, a malicious user with the ability to create connectors, could utilize these connectors to view limited HTTP response data on hosts accessible to the cluster. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/kibana-7-15-2-security-update/288923
CVE ID: CVE-2021-37940 State: PUBLISHED Published: 2021-12-07T18:59:29 Last Updated: 2024-08-04T01:30:08.972Z Vendors: Elastic Products: Enterprisesearch Problem Types: CWE-918 Description: An information disclosure via GET request server-side request forgery vulnerability was discovered with the Workplace Search Github Enterprise Server integration. Using this vulnerability, a malicious Workplace Search admin could use the GHES integration to view hosts that might not be publicly accessible. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/enterprise-search-7-16-0-security-update/291146
CVE ID: CVE-2021-37941 State: PUBLISHED Published: 2021-12-08T21:15:19 Last Updated: 2024-08-04T01:30:08.522Z Vendors: Elastic Products: APM Java Agent Problem Types: CWE-269 Description: A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious file to an application running with the APM Java agent. Using this vector, a malicious or compromised user account could use the agent to run commands at a higher level of permissions than they possess. This vulnerability affects users that have set up the agent via the attacher cli 3, the attach API 2, as well as users that have enabled the profiling_inferred_spans_enabled option Additi
attacher cli 3, the attach API 2, as well as users that have enabled the profiling_inferred_spans_enabled option Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/apm-java-agent-security-update/289627
CVE ID: CVE-2021-37942 State: PUBLISHED Published: 2023-11-22T01:33:48.984Z Last Updated: 2024-08-04T01:30:09.172Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Elastic Products: Elastic APM Java Agent Problem Types: CWE-269 Description: A local privilege escalation issue was found with the APM Java agent, where a user on the system could attach a malicious plugin to an application running the APM Java agent. By using this vulnerability, an attacker could execute code at a potentially higher level of permissions than their user typically has access to. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/apm-java-agent-
access to. Additional Analyst Notes: - CVE Program Container: References: - https://discuss.elastic.co/t/apm-java-agent-security-update/291355 - https://www.elastic.co/community/security
CVE ID: CVE-2021-37956 State: PUBLISHED Published: 2021-10-08T21:30:29 Last Updated: 2024-08-04T01:30:08.956Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Offline use in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1243117 - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SUR
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37957 State: PUBLISHED Published: 2021-10-08T21:30:30 Last Updated: 2024-08-04T01:30:09.038Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebGPU in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1242269 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/lis
ounce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37958 State: PUBLISHED Published: 2021-10-08T21:30:32 Last Updated: 2024-08-04T01:30:09.154Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Navigation in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to inject scripts or HTML into a privileged page via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1223290 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5
s://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37959 State: PUBLISHED Published: 2021-10-08T21:30:33 Last Updated: 2024-08-04T01:30:09.181Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Task Manager in Google Chrome prior to 94.0.4606.54 allowed an attacker who convinced a user to enage in a series of user gestures to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1229625 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4S
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37960 State: REJECTED Published: 2021-11-02T20:55:13 Last Updated: 2021-11-02T20:55:13 Description: No description available.
CVE ID: CVE-2021-37961 State: PUBLISHED Published: 2021-10-08T21:30:35 Last Updated: 2024-08-04T01:30:08.957Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Tab Strip in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1228557 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/
announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37962 State: PUBLISHED Published: 2021-10-08T21:30:36 Last Updated: 2024-08-04T01:30:08.947Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Performance Manager in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1231933 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO
ps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37963 State: PUBLISHED Published: 2021-10-08T21:30:38 Last Updated: 2024-08-04T01:30:09.166Z Vendors: Google Products: Chrome Problem Types: Side-channel information leakage Description: Side-channel information leakage in DevTools in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to bypass site isolation via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1199865 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedora
rchives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37964 State: PUBLISHED Published: 2021-10-08T21:30:39 Last Updated: 2024-08-04T01:30:09.230Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in ChromeOS Networking in Google Chrome on ChromeOS prior to 94.0.4606.54 allowed an attacker with a rogue wireless access point to to potentially carryout a wifi impersonation attack via a crafted ONC file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1203612 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
p_21.html - https://crbug.com/1203612 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37965 State: PUBLISHED Published: 2021-10-08T21:30:41 Last Updated: 2024-08-04T01:30:09.163Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1239709 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.f
org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37966 State: PUBLISHED Published: 2021-10-08T21:30:42 Last Updated: 2024-08-04T01:30:08.964Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Compositing in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1238944 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D
://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37967 State: PUBLISHED Published: 2021-10-08T21:30:44 Last Updated: 2024-08-04T01:30:09.166Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1243622 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS
om/1243622 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37968 State: PUBLISHED Published: 2021-10-08T21:30:46 Last Updated: 2024-08-04T01:30:09.035Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1245053 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.f
CVE ID: CVE-2021-37969 State: PUBLISHED Published: 2021-10-08T21:30:47 Last Updated: 2024-08-04T01:30:09.174Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in Google Updater in Google Chrome on Windows prior to 94.0.4606.54 allowed a remote attacker to perform local privilege escalation via a crafted file. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1245879 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - htt
doraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37970 State: PUBLISHED Published: 2021-10-08T21:30:49 Last Updated: 2024-08-04T01:30:09.336Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in File System API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1248030 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/arc
ckage-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37971 State: PUBLISHED Published: 2021-10-08T21:30:50 Last Updated: 2024-08-04T01:30:09.138Z Vendors: Google Products: Chrome Problem Types: Incorrect security UI Description: Incorrect security UI in Web Browser UI in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox (URL bar) via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1219354 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.
.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37972 State: PUBLISHED Published: 2021-10-08T21:30:52 Last Updated: 2024-08-04T01:30:09.011Z Vendors: Google Products: Chrome Problem Types: Out of bounds read Description: Out of bounds read in libjpeg-turbo in Google Chrome prior to 94.0.4606.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html - https://crbug.com/1234259 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.o
ist/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/B7G7UQ57NOKHQBYIHNJAFKFVWOQ6ZNU6/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37973 State: PUBLISHED Published: 2021-10-08T21:40:09.000Z Last Updated: 2025-10-21T23:25:29.411Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Portals in Google Chrome prior to 94.0.4606.61 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://crbug.com/1251727 - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_24.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HA
sktop_24.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/ - https://www.debian.org/security/2022/dsa-5046
CVE ID: CVE-2021-37974 State: PUBLISHED Published: 2021-10-08T21:50:12 Last Updated: 2024-08-04T01:30:09.207Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Additional Analyst Notes: - CVE Program Container: References: - https://crbug.com/1245578 - https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_30.html - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/D63JZ3ROXCUHP4CFWDHCPZNTGET7T34R/