Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2023:0032-1 Rating: important References: 1207512 Cross-References: CVE-2023-0471 CVE-2023-0472 CVE-2023-0473 CVE-2023-0474 Affected Products: openSUSE Backports SLE-15-SP4 An update that fixes four vulnerabilitie...

Microsoft Edge (Chromium) < 109.0.1343.27 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 109.0.1343.27. It is, therefore, affected by multiple vulnerabilities as referenced in the January 26, 2023 advisory. - Use after free in WebTransport. CVE-2023-0471 - Use after free in WebRTC. CVE-2023-0472 - Type...

Debian DSA-5328-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5328 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For the...

[SECURITY] [DSA 5328-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5328-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 26, 2023 https://www.debian.org/security/faq -...

Important: Red Hat Security Advisory: Migration Toolkit for Runtimes security update

An update is now available for Migration Toolkit for Runtimes v1.0.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

Chromium: CVE-2023-0471 Use after free in WebTransport

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

FreeBSD : chromium -- multiple vulnerabilities (3d0a3eb0-9ca3-11ed-a925-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3d0a3eb0-9ca3-11ed-a925-3065ec8fd3ec advisory. - Use after free in WebTransport. CVE-2023-0471 - Use after free in WebRTC. CVE-2023-0472 - Ty...

CVE-2023-0471

CVE-2023-0471: Use-after-free in WebTransport in Google Chrome before 109.0.5414.119. A crafted HTML page could trigger heap corruption via WebTransport, enabling remote code execution or instability per Chromium advisory. The Chrome release notes confirm a security fix in the 109.0.5414.119 Stab...

CVE-2023-0471

Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Google Chrome < 109.0.5414.119 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 109.0.5414.119. It is, therefore, affected by multiple vulnerabilities as referenced in the 202301stable-channel-update-for-desktop24 advisory. - Use after free in GuestView in Google Chrome prior to 109.0.5414.119 allowe...

Stable Channel Update for Desktop

The Stable channel has been updated to 109.0.5414.119 for Mac and Linux and 109.0.5414.119/.120 for Windows, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept...

CVE-2023-0471

Use after free in WebTransport in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Important Photon OS Security Update - PHSA-2022-3.0-0471

Updates of 'kafka' packages of Photon OS have been released...

CVE-2022-0471

The CVE-2022-0471 entry applies to the WordPress plugin “Favicon by RealFaviconGenerator” (pre-1.3.23). The vulnerability arises from improper sanitisation/escaping of the json_result_url parameter, leading to a Reflected Cross-Site Scripting (XSS) in the Favicon admin dashboard. Affected version...

CVE-2022-0471 Favicon by RealFaviconGenerator < 1.3.23 - Reflected Cross-Site Scripting

The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the jsonresulturl parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue...

Mageia: Security Advisory (MGASA-2015-0471)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2020-0471)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0471)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2014-0289)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2012:0688-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...