Lucene search
+L

5143 matches found

CVE
CVE
•added 2021/06/24 1:25 p.m.•183 views

CVE-2021-23996

CVE-2021-23996 affects Mozilla Firefox prior to 88.0, where a flaw in rendering with 3D CSS and JavaScript could cause content to appear outside the viewport, enabling spoofing potentially for phishing. Multiple connected advisories (Arch Linux ASA-202104-3, Alpine, CNVD/CNNVD entries, Kaspersky,...

6.5CVSS6.2AI score0.00719EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2021/06/24 1:25 p.m.•49 views

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

7.1AI score0.00719EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
•added 2021/06/24 1:25 p.m.•104 views

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

6.5CVSS6.6AI score0.00719EPSS
SaveExploits0
Debian CVE
Debian CVE
•added 2021/06/24 1:25 p.m.•88 views

CVE-2021-23996

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

6.5CVSS8AI score0.00719EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/24 12:00 a.m.•6 views

CVE-2021-23996: Undefined Security Weakness

By utilizing 3D CSS in conjunction with Javascript, content could have been rendered outside the webpage's viewport, resulting in a spoofing attack that could have been used for phishing or other attacks on a user. This vulnerability affects Firefox 88...

6.5CVSS6.1AI score0.00719EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/06/21 12:00 a.m.•10 views

Microsoft 3D Builder GLTF Memory Corruption Vulnerability

Microsoft 3D Builder is a 3D modeling tool developed by Microsoft. A memory corruption vulnerability exists in Microsoft 3D Builder GLTF processing, which can be exploited by an attacker to submit a special file request and trick the user into parsing it, which can crash the application or execut...

7.9AI score
SaveExploits0References1
CNVD
CNVD
•added 2021/06/21 12:00 a.m.•9 views

Microsoft 3D Builder OBJ Code Execution Vulnerability

Microsoft 3D Builder is a 3D modeling tool developed by Microsoft. A code execution vulnerability exists in the Microsoft 3D Builder OBJ handling, which can be exploited by an attacker to submit a special file request that can be tricked into being parsed by the user, which can crash the...

8AI score
SaveExploits0References1
CNVD
CNVD
•added 2021/06/21 12:00 a.m.•7 views

Microsoft 3D Builder GLB Memory Corruption Vulnerability

Microsoft 3D Builder is a 3D modeling tool developed by Microsoft. An out-of-bounds write vulnerability exists in Microsoft 3D Builder GLB processing, which can be exploited by an attacker to submit a special file request that can be tricked into being parsed by the user, which can crash the...

7.8AI score
SaveExploits0References1
CNVD
CNVD
•added 2021/06/21 12:00 a.m.•14 views

Microsoft Print 3D PLY Code Execution Vulnerability

Microsoft Print 3D is a 3D modeling tool developed by Microsoft. The Microsoft Print 3D PLY code execution vulnerability is exploited by remote attackers to submit a special file request that induces the user to parse it, which can crash the application or execute arbitrary code in the applicatio...

8.2AI score
SaveExploits0References1
CNVD
CNVD
•added 2021/06/21 12:00 a.m.•13 views

Microsoft Print 3D PLY Code Execution Vulnerability (CNVD-2021-47650)

Microsoft Print 3D is a 3D modeling tool developed by Microsoft. A code execution vulnerability exists in Microsoft Print 3D PLY processing, which can be exploited by an attacker to submit a special file request that can be tricked into being parsed by the user, which can crash the application or...

8AI score
SaveExploits0References1
CNVD
CNVD
•added 2021/06/21 12:00 a.m.•19 views

Microsoft 3D Viewer 3MF Code Execution Vulnerability

Microsoft 3D Viewer is a 3D modeling tool developed by Microsoft. A use-after-release vulnerability exists in Microsoft 3D Viewer 3MF processing, which can be exploited by an attacker to submit a special file request that can be tricked into being parsed by the user, which can cause the applicati...

7.7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2021/06/17 12:00 a.m.•61 views

(0Day) Microsoft Print 3D OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/17 12:00 a.m.•38 views

(0Day) Microsoft 3D Builder PLY File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS5.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/17 12:00 a.m.•35 views

(0Day) Microsoft 3D Builder PLY File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS5.5AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/17 12:00 a.m.•36 views

(0Day) Microsoft Print 3D PLY File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/17 12:00 a.m.•38 views

(0Day) Microsoft 3D Builder OBJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS5.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/17 12:00 a.m.•35 views

(0Day) Microsoft 3D Builder GLB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS5.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/17 12:00 a.m.•46 views

(0Day) Microsoft Print 3D PLY File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Print 3D. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

6.6CVSS5.3AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/17 12:00 a.m.•39 views

(0Day) Microsoft 3D Builder GLB File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS5.4AI score
SaveExploits0
Zero Day Initiative
Zero Day Initiative
•added 2021/06/17 12:00 a.m.•46 views

(0Day) Microsoft 3D Builder GLTF File Parsing Memory Corruption Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing o...

6.6CVSS5.7AI score
SaveExploits0
Rows per page
Query Builder