Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,081

Export CSV
CVE-2021-24113

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability

CVSS 3.1 · 5.4 Medium EPSS 1.5% KEV · Not listed
Vendors
Microsoft
Products
Edge Chromium
CVE-2021-24100

Microsoft Edge for Android Information Disclosure Vulnerability

Microsoft Edge for Android Information Disclosure Vulnerability

CVSS 3.1 · 5 Medium EPSS 3.1% KEV · Not listed
Vendors
Microsoft
Products
Edge
CVE-2021-21141

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass file extension policy via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 5.9% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Edge
CVE-2021-21140

Uninitialized use in USB in Google Chrome prior to 88.0.4324.96 allowed a local attacker to potentially perform out of bounds memory access via via a USB device.

CVSS 3.1 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Edge
CVE-2021-21139

Inappropriate implementation in iframe sandbox in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 5.1% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Edge Chromium
CVE-2021-21137

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 6.4% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Edge Chromium
CVE-2021-21136

Insufficient policy enforcement in WebView in Google Chrome on Android prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 4.5% KEV · Not listed
Vendors
Google Microsoft
Products
Android Chrome Edge Chromium
CVE-2021-21135

Inappropriate implementation in Performance API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 20.7% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Edge Chromium
CVE-2021-21133

Insufficient policy enforcement in Downloads in Google Chrome prior to 88.0.4324.96 allowed an attacker who convinced a user to download files to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 3.3% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Edge Chromium
CVE-2021-21132

Inappropriate implementation in DevTools in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially perform a sandbox escape via a crafted Chrome Extension.

CVSS 3.1 · 9.6 Critical EPSS 25.1% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Edge Chromium
CVE-2021-21131

Insufficient policy enforcement in File System API in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to bypass filesystem restrictions via a crafted HTML page.

CVSS 3.1 · 6.5 Medium EPSS 8.2% KEV · Not listed
Vendors
Google Microsoft
Products
Chrome Edge Chromium