7.5
CVSSv3

CVE-2019-8075

Published: 27/09/2019 Updated: 07/11/2023
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Adobe Flash Player version 32.0.0.192 and previous versions versions have a Same Origin Policy Bypass vulnerability. Successful exploitation could lead to Information Disclosure in the context of the current user.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

adobe flash_player_desktop_runtime

adobe flash_player

google chrome

debian debian linux 10.0

fedoraproject fedora 32

fedoraproject fedora 33

Vendor Advisories

Multiple security issues were discovered in the Chromium web browser, which could result in the execution of arbitrary code, denial of service or information disclosure For the stable distribution (buster), these problems have been fixed in version 870428088-04~deb10u1 We recommend that you upgrade your chromium packages For the detailed sec ...
The Chrome team is delighted to announce the promotion of Chrome 87 to the Stable channel (870428066 for Windows and Linux, 870428067 for Mac) This will roll out over the coming days/weeksChrome 870428066/67 contains native support for Apple M1 devices and a number of fixes and improvements -- a list of changes is available in the&n ...

Github Repositories

cross-site (XS) search attack - scripts

XS-Search Attacks Cross-site search attacks allow a rogue website to expose private, sensitive user-information from web applications The attacker exploits timing and other side channels to extract the information, using cleverly-designed cross-site queries Full-text available Reproducibility System In this repo you can find several xs-search attack scripts that we run on o