CVE-2019-5591 is a vulnerability in Fortinet FortiOS default configuration that allows an unauthenticated attacker on the same subnet to intercept sensitive information by impersonating the LDAP server. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns. It is classified as high severity due to the potential exposure of sensitive data and active exploitation.
CVE-2020-12812 is an improper authentication vulnerability in Fortinet FortiOS SSL VPN that allows bypassing the second-factor authentication (FortiToken) by altering the case of the username during login. This vulnerability has been exploited in the wild and is known to be used in ransomware campaigns.
CVE-2020-16010 is a heap buffer overflow vulnerability in the Google Chrome for Android UI. It allows a remote attacker who has compromised the renderer process to potentially escape the sandbox by using a crafted HTML page. This vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2020-15999 is a heap buffer overflow vulnerability in the FreeType library used by Google Chrome to render fonts. The flaw exists in the Load_SBit_Png function when processing PNG images embedded in fonts. This vulnerability has been exploited in the wild and is part of an exploit chain with other vulnerabilities affecting Windows and Android platforms.
CVE-2021-21166 is a race condition vulnerability in Google Chromium that can be exploited remotely via a crafted HTML page to cause heap corruption. This flaw affects multiple Chromium-based browsers including Google Chrome, Microsoft Edge, and Opera. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2020-16017 is a use-after-free vulnerability in Google Chrome that allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. This vulnerability has been exploited in the wild. No specific affected versions or patch information are provided in the input data.
CVE-2021-37976 is an information disclosure vulnerability in the core memory component of Google Chromium. It allows a remote attacker to obtain potentially sensitive information from process memory by delivering a crafted HTML page. This vulnerability affects multiple Chromium-based browsers, including Google Chrome, Microsoft Edge, and Opera. Exploitation of this vulnerability has been observed in the wild. No specific affected versions or patch information is provided in the available data.
CVE-2020-16009 is a high-severity type confusion vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to potentially cause heap corruption by crafting a malicious HTML page. This vulnerability affects multiple web browsers that use the Chromium engine, such as Google Chrome, Microsoft Edge, and Opera. Exploits for this vulnerability have been observed in the wild.
CVE-2021-30632 is an out-of-bounds write vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to potentially cause heap corruption by crafting a malicious HTML page. This vulnerability affects multiple Chromium-based web browsers including Google Chrome, Microsoft Edge, and Opera. Exploitation of this flaw has been observed in the wild. No explicit patch information is provided in the input data.
CVE-2020-16013 is a vulnerability in the Google Chromium V8 JavaScript engine caused by an incorrect implementation that can lead to heap corruption. This flaw allows a remote attacker to potentially exploit the vulnerability by crafting a malicious HTML page. Multiple web browsers that use Chromium, including Google Chrome, Microsoft Edge, and Opera, may be affected. The vulnerability has been exploited in the wild. No explicit affected versions or patch information is provided in the source data.
CVE-2021-30633 is a use-after-free vulnerability in the Google Chromium Indexed DB API. It allows a remote attacker who has compromised the renderer process to potentially escape the sandbox by using a crafted HTML page. This vulnerability affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. Exploits have been observed in the wild. No explicit patch information is provided in the input data.
CVE-2021-21148 is a heap buffer overflow vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to cause heap corruption by crafting a malicious HTML page. This vulnerability affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. It has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2021-37973 is a use-after-free vulnerability in Google Chromium Portals that can be exploited by a remote attacker who has compromised the renderer process. This flaw potentially allows sandbox escape via a crafted HTML page. It affects Chromium-based web browsers such as Google Chrome and Microsoft Edge. The vulnerability has been exploited in the wild.
CVE-2021-30551 is a type confusion vulnerability in the Google Chromium V8 JavaScript engine that allows remote attackers to potentially cause heap corruption by crafting malicious HTML pages. This vulnerability affects multiple Chromium-based web browsers, including Google Chrome, Microsoft Edge, and Opera. It has been exploited in the wild. No explicit patch information is provided in the input data.
CVE-2021-37975 is a use-after-free vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to potentially cause heap corruption by crafting a malicious HTML page. This vulnerability affects multiple Chromium-based web browsers such as Google Chrome, Microsoft Edge, and Opera. It has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2020-6418 is a high-severity type confusion vulnerability in the Google Chromium V8 JavaScript engine. It allows a remote attacker to potentially cause heap corruption by crafting a malicious HTML page. This vulnerability affects multiple web browsers that use the Chromium engine, such as Google Chrome, Microsoft Edge, and Opera. Exploitation of this flaw has been observed in the wild. No specific affected versions or patch information are provided in the input data.
CVE-2021-30554 is a use-after-free vulnerability in Google Chromium's WebGL component that allows remote attackers to potentially cause heap corruption via crafted HTML pages. This vulnerability affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. It has been exploited in the wild, indicating active threat usage. No explicit patch or remediation details are provided in the input data.
CVE-2021-21206 is a use-after-free vulnerability in Google Chromium Blink that allows remote attackers to exploit heap corruption via a crafted HTML page. This vulnerability affects multiple Chromium-based browsers, including Google Chrome, Microsoft Edge, and Opera. It has been exploited in the wild. No specific affected versions or patch information is provided in the input data.
CVE-2021-38000 is an improper input validation vulnerability in Google Chromium Intents that allows a remote attacker to cause a browser to navigate to a malicious URL via a crafted HTML page. This affects multiple Chromium-based browsers such as Google Chrome, Microsoft Edge, and Opera. The vulnerability has been exploited in the wild. No specific affected versions or patch information is provided.
CVE-2021-38003 is a memory corruption vulnerability in the Google Chromium V8 JavaScript engine's JSON.stringify function. The flaw involves leaking an internal value called TheHole to script code, which can cause memory corruption. This vulnerability affects multiple Chromium-based web browsers including Google Chrome, Microsoft Edge, and Opera. It has been exploited in the wild, indicating active attacks leveraging this issue.