Microsoft Edge (Chromium) < 116.0.1938.69 (CVE-2023-4572)

The version of Microsoft Edge installed on the remote Windows host is prior to 116.0.1938.69. It is, therefore, affected by a vulnerability as referenced in the August 31, 2023 advisory. - Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to...

FreeBSD : electron25 -- multiple vulnerabilities (970dcbe0-a947-41a4-abe9-7aaba87f41fe)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 970dcbe0-a947-41a4-abe9-7aaba87f41fe advisory. - Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote...

KLA52702 ACE vulnerability in Microsoft Browser

Use after free vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service. Original advisories CVE-2023-4572 Related products Microsoft-Edge CVE list CVE-2023-4572 critical KB list Solution Install necessary...

SUSE CVE-2023-4572

Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4572

creationtimestamp| type| source ---|---|--- 2023-08-30 00:17:39+00:00| seen| https://t.me/cibsecurity/69386...

electron25 -- multiple vulnerabilities

Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2023-4427. Security: backported fix for CVE-2023-4428. Security: backported fix for CVE-2023-4429. Security: backported fix for CVE-2023-4430. Security: backported fix for CVE-2023-4572...

electron24 -- multiple vulnerabilities

Electron developers report: This update fixes the following vulnerabilities: Security: backported fix for CVE-2023-4427. Security: backported fix for CVE-2023-4428. Security: backported fix for CVE-2023-4430. Security: backported fix for CVE-2023-4572...

CVE-2023-4572

Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4572

Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4572

Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4572

CVE-2023-4572 is a use-after-free vulnerability in Chrome/Chromium's MediaStream that could allow remote code execution via a crafted HTML page, caused by heap corruption. The CVE affects Chrome/Chromium browsers before the referenced fix version 116.0.5845.140. Public updates released by Debian ...

CVE-2023-4572

Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Google Chrome < 116.0.5845.140 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 116.0.5845.140. It is, therefore, affected by a vulnerability as referenced in the 202308stable-channel-update-for-desktop29 advisory. - Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a...

Google Chrome < 116.0.5845.140 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 116.0.5845.140. It is, therefore, affected by a vulnerability as referenced in the 202308stable-channel-update-for-desktop29 advisory. - Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a...

SUSE CVE-2007-4572

Stack-based buffer overflow in nmbd in Samba 3.0.0 through 3.0.26a, when configured as a Primary or Backup Domain controller, allows remote attackers to have an unknown impact via crafted GETDC mailslot requests, related to handling of GETDC logon server requests...

CVE-2022-4572

CVE-2022-4572 concerns a path traversal vulnerability in UBI Reader up to version 0.8.0. The flaw targets the function ubireader_extract_files in the file ubireader/ubifs/output.py of the UBIFS File Handler, enabling path traversal under certain conditions. The issue could be exploited remotely a...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Spice vulnerability (USN-4572-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4572-1 advisory. Frediano Ziglio discovered that Spice incorrectly handled QUIC image decoding. A remote attacker could use this to cause Spice to crash,...

CVE-2020-4572

The CVE-2020-4572 issue affects IBM Security Key Lifecycle Manager (3.0.1 and 4.0). The root cause is that a detailed technical error message returned by the browser can disclose sensitive information to remote attackers, enabling further exploitation. IBM has released fixes: 3.0.1-ISS-SKLM-FP000...

CVE-2013-4572

The CentralNotice extension for MediaWiki before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3 sets the Cache-Control header to cache session cookies when a user is autocreated, which allows remote attackers to authenticate as the created user...

CVE-2013-4572

The CVE-2013-4572 issue affects MediaWiki's CentralNotice extension and is caused by an incorrect Cache-Control header configuration that caches session cookies when a user is autocreated. Affected versions are MediaWiki CentralNotice before 1.19.9, 1.20.x before 1.20.8, and 1.21.x before 1.21.3....