Security Vulnerabilities - CVEs Published In 2021
Use after free in Printing in Google Chrome prior to 92.0.4515.159 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVSS Score
8.8
EPSS Score
0.025
Published
2021-08-26
Use after free in Extensions API in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.
CVSS Score
8.8
EPSS Score
0.019
Published
2021-08-26
Use after free in WebRTC in Google Chrome prior to 92.0.4515.159 allowed an attacker who convinced a user to visit a malicious website to potentially exploit heap corruption via a crafted HTML page.
CVSS Score
8.8
EPSS Score
0.021
Published
2021-08-26
Data race in WebAudio in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score
7.5
EPSS Score
0.039
Published
2021-08-26
Use after free in ANGLE in Google Chrome prior to 92.0.4515.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS Score
8.8
EPSS Score
0.025
Published
2021-08-26
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score
6.0
EPSS Score
0.009
Published
2021-08-26
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
CVSS Score
6.3
EPSS Score
0.032
Published
2021-08-26
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
CVSS Score
4.4
EPSS Score
0.013
Published
2021-08-26
Cross Site Scripting (XSS) vulnerabilty exists in BigTree-CMS 4.4.3 in the tag name field found in the Tags page under the General menu via a crafted website name by doing an authenticated POST HTTP request to admin/tags/create.
CVSS Score
5.4
EPSS Score
0.005
Published
2021-08-26
Cross Site Scripting (XSS) vulnerability exists in qdPM 9.1 in the Heading field found in the Login Page page under the General menu via a crafted website name by doing an authenticated POST HTTP request to /qdPM_9.1/index.php/configuration.
CVSS Score
5.4
EPSS Score
0.004
Published
2021-08-26