CVE-2021-28876
- EPSS 0.42%
- Veröffentlicht 11.04.2021 20:15:12
- Zuletzt bearbeitet 21.11.2024 06:00:21
In the standard library in Rust before 1.52.0, the Zip implementation has a panic safety issue. It calls __iterator_get_unchecked() more than once for the same index when the underlying iterator panics (in certain conditions). This bug could lead to ...
CVE-2021-28878
- EPSS 1.01%
- Veröffentlicht 11.04.2021 20:15:12
- Zuletzt bearbeitet 21.11.2024 06:00:21
In the standard library in Rust before 1.52.0, the Zip implementation calls __iterator_get_unchecked() more than once for the same index (under certain conditions) when next_back() and next() are used together. This bug could lead to a memory safety ...
CVE-2021-28879
- EPSS 1.1%
- Veröffentlicht 11.04.2021 20:15:12
- Zuletzt bearbeitet 21.11.2024 06:00:21
In the standard library in Rust before 1.52.0, the Zip implementation can report an incorrect size due to an integer overflow. This bug can lead to a buffer overflow when a consumed Zip iterator is used again.
CVE-2021-21194
- EPSS 0.84%
- Veröffentlicht 09.04.2021 22:15:17
- Zuletzt bearbeitet 21.11.2024 05:47:45
Use after free in screen sharing in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21195
- EPSS 0.12%
- Veröffentlicht 09.04.2021 22:15:17
- Zuletzt bearbeitet 21.11.2024 05:47:45
Use after free in V8 in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21196
- EPSS 1.04%
- Veröffentlicht 09.04.2021 22:15:17
- Zuletzt bearbeitet 21.11.2024 05:47:45
Heap buffer overflow in TabStrip in Google Chrome on Windows prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21197
- EPSS 0.74%
- Veröffentlicht 09.04.2021 22:15:17
- Zuletzt bearbeitet 21.11.2024 05:47:45
Heap buffer overflow in TabStrip in Google Chrome prior to 89.0.4389.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-21198
- EPSS 0.83%
- Veröffentlicht 09.04.2021 22:15:17
- Zuletzt bearbeitet 21.11.2024 05:47:45
Out of bounds read in IPC in Google Chrome prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.
CVE-2021-21199
- EPSS 0.67%
- Veröffentlicht 09.04.2021 22:15:17
- Zuletzt bearbeitet 21.11.2024 05:47:45
Use after free in Aura in Google Chrome on Linux prior to 89.0.4389.114 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVE-2021-30155
- EPSS 0.45%
- Veröffentlicht 09.04.2021 07:15:16
- Zuletzt bearbeitet 21.11.2024 06:03:24
An issue was discovered in MediaWiki before 1.31.12 and 1.32.x through 1.35.x before 1.35.2. ContentModelChange does not check if a user has correct permissions to create and set the content model of a nonexistent page.