Lucene search
+L

3713 matches found

Prion
Prion
added 2024/02/21 4:15 a.m.27 views

Design/Logic Flaw

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

7.4AI score0.00801EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2024/02/21 3:14 a.m.42 views

CVE-2024-1673

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

6.3AI score0.00801EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2024/02/21 3:14 a.m.52 views

CVE-2024-1673

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS9.5AI score0.00801EPSS
SaveExploits1
Vulnrichment
Vulnrichment
added 2024/02/21 3:14 a.m.14 views

CVE-2024-1673

Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

7.1AI score0.00801EPSS
SaveExploits1References4
CVE
CVE
added 2024/02/21 3:14 a.m.4009 views

CVE-2024-1673

CVE-2024-1673 affects Google Chrome/Chromium: a use-after-free in Accessibility in the renderer prior to 122.0.6261.57 can allow a remote attacker to potentially cause heap corruption via specific UI gestures. Affected product: Chromium/Chrome (Accessibility component) with root cause described a...

8.8CVSS5.9AI score0.00801EPSS
SaveExploits1References4Affected Software1
FreeBSD
FreeBSD
added 2024/02/20 12:00 a.m.31 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 12 security fixes: 41495060 High CVE-2024-1669: Out of bounds memory access in Blink. Reported by Anonymous on 2024-01-26 41481374 High CVE-2024-1670: Use after free in Mojo. Reported by Cassidy Kim@cassidy6564 on 2023-12-06 41487933 Medium...

9.8CVSS7AI score0.18849EPSS
SaveExploits6References1
Tenable Nessus
Tenable Nessus
added 2024/02/20 12:00 a.m.89 views

Google Chrome < 122.0.6261.57 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 122.0.6261.57. It is, therefore, affected by multiple vulnerabilities as referenced in the 202402stable-channel-update-for-desktop20 advisory. - Insufficient policy enforcement in Download in Google Chrome prior to...

9.8CVSS7.4AI score0.18849EPSS
SaveExploits6References17
CNNVD
CNNVD
added 2024/02/20 12:00 a.m.9 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is due to free usage in Accessibility. An attacker can exploit this vulnerability to execute arbitrary code on the system...

8.8CVSS9.5AI score0.00801EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2024/02/20 12:00 a.m.14 views

PT-2024-5222 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 122.0.6261.57 Description: The issue is related to a use after free vulnerability in the Accessibility component of Google Chrome. This vulnerability can be exploited by a remote attacker who convinces a user t...

10CVSS7AI score0.99735EPSS
SaveExploits129References1061
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:00 a.m.10 views

The vulnerability of the derive_combined_bipredictive_merging_candidates function in the h.265 Libde265 codec implementation allows a attacker to influence the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the derivecombinedbipredictivemergingcandidates function in the h.265 Libde265 video codec implementation is related to buffer overflow in dynamic memory. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibili...

10CVSS6.9AI score0.00775EPSS
SaveExploits1References13Affected Software6
BDU FSTEC
BDU FSTEC
added 2024/02/19 12:00 a.m.17 views

The vulnerability of the SAP Application Interface Framework, a software tool for developing and managing application interfaces, arises from improper code generation. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the SAP Application Interface Framework, a software tool for developing and managing application interfaces, is related to improper code generation. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of data...

8.4CVSS7.8AI score0.00611EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/02/16 2:15 a.m.9 views

CVE-2024-0038

In injectInputEventToInputFilter of AccessibilityManagerService.java, there is a possible arbitrary input event injection due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS6AI score0.00133EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/02/16 12:00 a.m.11 views

Google Android Security Vulnerability

Google Android is a Linux-based open source operating system from Google Inc. in the United States. A security vulnerability exists in Google Android, which stems from a lack of permission checking in the injectInputEventToInputFilter method of the AccessibilityManagerService.java file, which cou...

8.4CVSS6.8AI score0.00133EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/02/15 12:00 a.m.8 views

PT-2024-15313 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to a missing permission check in the injectInputEventToInputFilter function of AccessibilityManagerService.java. This could lead to arbitrary input event injection,...

8.4CVSS6.8AI score0.00133EPSS
SaveExploits0References7
HackRead
HackRead
added 2024/02/14 8:34 p.m.18 views

ChatGPT Down? Anonymous Sudan Claims Responsibility for DDoS Attacks

By Waqas Is your ChatGPT down? Or, are you experiencing issues accessing ChatGPT? If so, youre not alone. ChatGPT has… This is a post from HackRead.com Read the original post: ChatGPT Down? Anonymous Sudan Claims Responsibility for DDoS Attacks...

7.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/02/13 8:00 a.m.96 views

Service Update 1.25 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

8.2CVSS7.5AI score0.01316EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:00 a.m.10 views

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to reading data outside the buffer in memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

9.6CVSS7.8AI score0.00308EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:00 a.m.10 views

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers relates to buffer overflow in dynamic memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of data...

8.3CVSS7.9AI score0.00259EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:00 a.m.14 views

The vulnerability of the Suricata intrusion detection and prevention system, related to the use of memory after it is freed, allows an intruder to influence the integrity and accessibility of the protected information.

The vulnerability of the Suricata intrusion detection and prevention system lies in the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to influence the integrity and accessibility of the protected information...

8.5CVSS7.2AI score0.00784EPSS
SaveExploits0References8Affected Software2
BDU FSTEC
BDU FSTEC
added 2024/02/13 12:00 a.m.9 views

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers allows a perpetrator to compromise the confidentiality, integrity, and accessibility of data.

The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers related to buffer overflow in dynamic memory. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of data...

8.3CVSS7.9AI score0.00259EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder