PatchTheCVEtoolbar vulnerabilities and fixes
Recent CVEs affecting toolbar, with upgrade or downgrade steps. 5 tracked.
toolbar has 5 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 3. Most recent: 2021-07-19. Highest priority: CVE-2008-7103 (score 61/100).
- CVE-2021-33592 CRITICAL 9.8 UPGRADE NAVER Toolbar before 4.0.30.323 allows remote attackers to execute arbitrary code via a crafted upgrade.xml fi
- CVE-2017-2253 HIGH 7.8 UPGRADE Untrusted search path vulnerability in Installer of Yahoo! Toolbar (for Internet explorer) v8.0.0.6 and earlie
- CVE-2013-6853 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in clickstream.js in Y! Toolbar plugin for FireFox 3.1.0.201308130241
- CVE-2012-2647 MEDIUM 5.8 UPGRADE Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the configured sear
- CVE-2008-7103 HIGH 9.3 DOWNGRADE Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows rem
FAQ
How do I fix toolbar vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is toolbar being exploited right now?
None of the tracked toolbar CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which toolbar CVE should I patch first?
CVE-2008-7103 currently ranks highest (61/100): Stack-based buffer overflow in an ActiveX control in najdisitoolbar.dll in Najdi.si Toolbar 2.0.4.1 allows rem.