GLSA-201903-23 : Chromium: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201903-23 Chromium: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details. Impact : Please review...

OPENSUSE-SU-2019:0298-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated: to 72.0.3626.121: CVE-2019-5786: Use-after-free in FileReader fixed boo1127602 Feature fixes update only...

Microsoft Patches Two Win32k Bugs Under Active Attack

Microsoft released patches for two Win32k bugs actively under attack, along with fixes for four additional bugs that are publicly known, as part of its March Patch Tuesday security bulletin. The Win32k bugs are both elevation of privilege vulnerabilities, rated important, and tied to the way...

[SECURITY] [DSA 4404-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4404-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 09, 2019 https://www.debian.org/security/faq -...

Google Chrome zero-day: Now is the time to update and restart your browser

Update 2019-03-21 A proof of concept for CVE-2019-5786 was published by Exodus Intel. In our earlier post we exercised caution before claiming we would have blocked this zero-day, but we can now say with confidence that an older version of Malwarebytes 1.12.1.122 would have mitigated this attack:...

openSUSE Security Update : chromium (openSUSE-2019-298)

This update for chromium fixes the following issues : Chromium was updated: to 72.0.3626.121 : - CVE-2019-5786: Use-after-free in FileReader fixed boo1127602 - Feature fixes update only %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:0298-1 Rating: important References: 1127602 Cross-References: CVE-2019-5786 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 An...

New Google Chrome Zero-Day Vulnerability Found Actively Exploited in the Wild

You must update your Google Chrome immediately to the latest version of the web browsing application. Security researcher Clement Lecigne of Google's Threat Analysis Group discovered and reported a high severity vulnerability in Chrome late last month that could allow remote attackers to execute...

Google Chrome < 72.0.3626.121 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 72.0.3626.121. It is, therefore, affected by a vulnerability as referenced in the 201903stable-channel-update-for-desktop advisory. - Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remo...

Google Chrome < 72.0.3626.121 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 72.0.3626.121. It is, therefore, affected by a vulnerability as referenced in the 201903stable-channel-update-for-desktop advisory. - Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote...

Stable Channel Update for Chrome OS

The Stable channel has been updated to 72.0.3626.122 Platform version: 11316.165.0 for most Chrome OS devices. This build contains a number of bug fixes, security updates and feature enhancements. A list of changes can be found here, including a fix for CVE-2019-5786. If you find new issues, plea...

[ASA-201903-1] chromium: arbitrary code execution

Arch Linux Security Advisory ASA-201903-1 ========================================= Severity: High Date : 2019-03-02 CVE-ID : CVE-2019-5786 Package : chromium Type : arbitrary code execution Remote : Yes Link : https://security.archlinux.org/AVG-916 Summary ======= The package chromium before...

CVE-2019-5786

creationtimestamp| type| source ---|---|--- 2019-03-01 23:16:24+00:00| seen| https://t.me/ctinow/8740 2019-03-06 10:58:20+00:00| exploited| https://t.me/thehackernews/213 2019-03-06 11:57:04+00:00| exploited| https://t.me/SecLabNews/4419 2019-03-06 18:07:21+00:00| exploited|...

KLA11430 ACE vulnerability in Google Chrome

Use-after-free vulnerability was found in FileReader component of Google Chrome. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Malware exists for this...

Chrome for Android Update

Good news, everyone! Chrome 72 72.0.3626.121 for Android has been released and will be available on Google Play over the course of the next few weeks. This release includes stability and performance improvements, including a fix for CVE-2019-5786. A list of the changes in this build is available ...

Stable Channel Update for Desktop

The stable channel has been updated to 72.0.3626.121 for Windows, Mac, and Linux, which will roll out over the coming days/weeks. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain...

CVE-2017-5786

CVE-2017-5786 describes a local Unauthorized Data Modification vulnerability in HP/ HPE OfficeConnect Network Switches, affected in PT.02.01 including PT.01.03–PT.01.14. The flaw allows an attacker with local access and low privileges to modify data (I: HIGH, C: NONE, A: NONE) without user intera...

CVE-2018-5786

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the getfileinfo function lrzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

CVE-2018-5786

In Long Range Zip aka lrzip 0.631, there is an infinite loop and application hang in the getfileinfo function lrzip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted lrz file...

CVE-2018-5786

CVE-2018-5786 affects Long Range ZIP (lrzip). The flaw is in lrzip 0.631’s get_fileinfo routine, which can enter an infinite loop when processing a crafted lrz file, leading to denial of service via remote input. Public advisories confirm impact across lrzip deployments and list patched versions:...