Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Niklasb

Researcher fromDataflow Security
#12155of 60,401
26.4Total CVSS
Vulnerabilities · 3
High
3
PT-2021-3565
2021-04-07
8.8
CVE-2021-21220
Google
Google Chrome
The issue is related to insufficient validation of untrusted input in the V8 engine of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to unauthorized access to confidential information or cause a denial of service. The vulnerability has been reportedly exploited by actors such as Water Labbu in Electron-based applications, particularly targeting the financial industry.
PT-2018-16539
2018-09-24
8.8
CVE-2018-4358
Apple
Itunes For Windows
The issue is related to multiple memory corruption problems that were addressed with improved memory handling.
PT-2017-15407
2017-05-04
8.8
CVE-2017-2491
Apple
Javascriptcore
The issue is related to a use after free vulnerability in the String.replace method in JavaScriptCore. This allows remote attackers to execute arbitrary code via a crafted web page or a crafted file. The vulnerability was demonstrated at Pwn2Own, indicating its potential for real-world exploitation.