[SECURITY] [DSA 5418-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5418-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff June 03, 2023 https://www.debian.org/security/faq -...

KLA49377 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, spoof user interface, gain privileges. Below is a complete list of vulnerabilities: 1. Use after free...

Google Chrome Security Updates (stable-channel-update-for-desktop_30-2023-05) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

SUSE CVE-2023-2932

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

CVE-2023-2932

creationtimestamp| type| source ---|---|--- 2023-05-31 02:23:57+00:00| seen| https://t.me/cibsecurity/64799...

DEBIAN-CVE-2023-2932

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

CVE-2023-2932

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

CVE-2023-2932

Use after free in PDF in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

CVE-2023-2932

CVE-2023-2932 is a use-after-free in the Chrome/Chromium PDF component, allowing heap corruption via a crafted PDF. Affected: Google Chrome (pre-114.0.5735.90) and Chromium-based builds. Root cause: use-after-free in PDF handling. Impact: high (as per CVE severity and CVSS). Remediation: upgrade ...

KLA49331 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. Out of bounds write vulnerability in Swiftshader can b...

Oracle Linux 8 : edk2 (ELSA-2023-2932)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2932 advisory. - Resolves: bz2164531 CVE-2023-0286 edk2: openssl: X.400 address type confusion in X.509 GeneralName rhel-8 - Resolves: bz2164543 CVE-2022-4304 edk2:...

CentOS 8 : edk2 (CESA-2023:2932)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2023:2932 advisory. - A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in ...

SUSE CVE-2017-2932

Adobe Flash Player versions 24.0.0.186 and earlier have an exploitable use after free vulnerability in the ActionScript MovieClip class. Successful exploitation could lead to arbitrary code execution...

@boundless-inc/ember-mobiledoc-editor (=0.5.13-boundless), @cardstack/mobiledoc (>=0.0.1 <=0.13.50) +19 more potentially affected by CVE-2022-2932 via mobiledoc-kit (>=0.10.15 <=0.12.5)

mobiledoc-kit NPM version =0.10.15, =0.0.1, =0.0.29, =0.1.0, =0.1.22, =0.1.6, =0.0.2, =0.4.4, =0.14.3, =0.6.3, =0.1.18, =0.0.14, =0.7.5, =0.5.0, =0.7.0 and more Source cves: CVE-2022-2932 Source advisory: OSV:GHSA-HW2P-XQHQ-3MJF...

CVE-2022-2932

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

CVE-2022-2932 Cross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

CVE-2022-2932

CVE-2022-2932 is a reflected XSS in mobiledoc-kit before 0.14.2. Public sources (GitHub/bustle/mobiledoc-kit, OSVGHSA, NVD) consistently describe the vulnerability as a client-side XSS via input processed by the library’s rendering chain, with the likely root cause in URL sanitization logic in th...

CVE-2022-2932 Cross-site Scripting (XSS) - Reflected in bustle/mobiledoc-kit

Cross-site Scripting XSS - Reflected in GitHub repository bustle/mobiledoc-kit prior to 0.14.2...

Debian: Security Advisory (DLA-2932-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0014)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...