CVE-2023-1819

Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1819

Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...

CVE-2023-1819

CVE-2023-1819 is an information-disclosure flaw in Google Chrome/Chromium Accessibility: an out-of-bounds memory read via a crafted HTML page. Affected: Google Chrome/Chromium (Accessibility component). Root cause: out-of-bounds read. Impact: potential confidential data exposure (C: High, I/N). E...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. An information disclosure vulnerability exists in Google Chrome Accessibility, which stems from an out-of-bounds read issue with accessibility features. A remote attacker could exploit this vulnerability to obtain sensitive...

March 28, 2023—KB5023774 (OS Build 22000.1761) Preview

None None...

About the security content of iOS 15.7.4 and iPadOS 15.7.4

About the security content of iOS 15.7.4 and iPadOS 15.7.4 This document describes the security content of iOS 15.7.4 and iPadOS 15.7.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

Microsoft achieves first native Cloud Data Management Capabilities certification

Today, Microsoft announced the successful completion of the Cloud Data Management Capabilities CDMC 14 Key Controls and Automations certification, conducted by Accenture and Avanade, accelerating the industry’s move to the cloud. The 14 Key Controls and Automations are a part of the EDM Council’s...

Users can lose funds due to stuck NFT's

Lines of code Vulnerability details Impact If msg.sender is a contract could also be smart contract wallet that does not implement the onERC721Received method, in the current implementation of fuse Namespace.sol && mint Bio.sol, the tx will still be successful, and the token will be minted. In th...

The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the Mozilla Thunderbird email client occurs due to an improper reduction of data from nsTextNode to SVGElement. This vulnerability allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerabilities of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird are related to an improper reduction of data from nsTextNode to SVGElement. Exploiting these vulnerabilities can allow attackers to compromise the confidentiality, integrity, and accessibility of...

Service Update 0.45 for Microsoft Dynamics CRM (on premises) 9.0

None None...

Service Update 1.16 for Microsoft Dynamics CRM (on-premises) 9.1

None None...

Xenomorph Android Banking Trojan Returns with a New and More Powerful Variant

A new variant of the Android banking trojan named Xenomorph has surfaced in the wild, latest findings from ThreatFabric reveal. Named "Xenomorph 3rd generation" by the Hadoken Security Group, the threat actor behind the operation, the updated version comes with new features that allow it to perfo...

Xenomorph Android Banking Trojan Returns with a New and More Powerful Variant

A new variant of the Android banking trojan named Xenomorph has surfaced in the wild, latest findings from ThreatFabric reveal. Named "Xenomorph 3rd generation " by the Hadoken Security Group, the threat actor behind the operation, the updated version comes with new features that allow it to...

The vulnerability of the Google Chrome browser’s window manager allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Google Chrome browser’s window manager is caused by a numerical overflow condition. Exploiting this vulnerability can allow an attacker, operating remotely, to compromise the confidentiality, integrity, and accessibility of the protected information...

K6922: Decimal-encoded IP address circumvents Accessibility Scope

Security Advisory Description Note : Versions that are not listed in this Solution have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the ...

K6924: Insertion of special characters in URL path circumvents Accessibility Scope and Access Control Lists

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

K6916: Case change in URL host name circumvents Accessibility Scope

Security Advisory Description Note : Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F...

February 21, 2023—KB5022906 (OS Builds 19042.2673, 19044.2673, and 19045.2673) Preview

None None...

Finding forensics breadcrumbs in Android image storage

Introduction Our digital forensics work is wide and varied. Often there’s very little that we can talk about in the public domain, so when I find something that we can share I get a bit excited. In this post I’ll be talking about image scanning apps, and how to reverse engineer them to pinpoint...

SUSE CVE-2015-1277

Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures...