CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome V8 JIT Compiler Input Validation Vulnerability leading to Remote Code Execution (CVE-2021-21220)
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 89.0.4389.128
[Impact] Remote attackers can trigger heap corruption and execute arbitrary code within the browser renderer process via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (89.0.4389.128 or higher)
Mozilla Firefox and Thunderbird IonMonkey JIT Compiler Type Confusion Vulnerability (CVE-2019-17026) Analysis and Mitigation Guide
[Affected Scope] Firefox < 72.0.1, Firefox ESR < 68.4.1, and Thunderbird < 68.4.1
[Impact] Exploitation of the type confusion flaw in the IonMonkey JIT compiler allows remote attackers to execute arbitrary code and compromise the host system via a crafted malicious webpage
[Mitigation] Immediately update all affected installations to Firefox 72.0.1, Firefox ESR 68.4.1, Thunderbird 68.4.1, or later