Lucene search
+L

4281 matches found

CNVD
CNVD
•added 2022/11/30 12:00 a.m.•56 views

Google Chrome Accessibility code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Accessibility, which is caused by free usage in Accessibility. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service...

8.8CVSS5.4AI score0.00686EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/11/30 12:00 a.m.•19 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in Google Chrome Accessibility, which is caused by free usage in Accessibility. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service...

8.8CVSS9AI score0.00686EPSS
SaveExploits0References7
osv-suse
osv-suse
•added 2022/11/29 2:53 p.m.•14 views

SUSE-SU-2022:4283-1 Security update for webkit2gtk3

Security fixes: - CVE-2022-32888: Fixed possible arbitrary code execution via maliciously crafted web content bsc1205121. - CVE-2022-32923: Fixed possible information leak via maliciously crafted web content bsc1205122. - CVE-2022-42799: Fixed user interface spoofing when visiting a malicious...

8.8CVSS7.6AI score0.01501EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
•added 2022/11/29 12:00 a.m.•90 views

Google Chrome < 108.0.5359.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop29 advisory. - Use after free in Accessibility in Google Chrome prior to 108.0.5359.71...

8.8CVSS7.2AI score0.23918EPSS
SaveExploits1References45
Cvelist
Cvelist
•added 2022/11/29 12:00 a.m.•42 views

CVE-2022-4194

Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

9.1AI score0.00686EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/29 12:00 a.m.•2 views

CVE-2022-4194: Use After Free

Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.2AI score0.00686EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2022/11/29 12:00 a.m.•39 views

CVE-2022-4194

Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS9.6AI score0.00686EPSS
SaveExploits0
CVE
CVE
•added 2022/11/29 12:00 a.m.•171 views

CVE-2022-4194

CVE-2022-4194 affects Google Chrome (Accessibility component) and is due to a use-after-free, enabling remote heap corruption via a crafted HTML page. The issue is listed in Chrome’s November 2022 security fixes and is among numerous Chromium CVEs addressed in Chrome 108.0.5359.71 and related upd...

8.8CVSS8.8AI score0.00686EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
•added 2022/11/29 12:00 a.m.•0 views

PT-2022-6185

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 108.0.5359.71 Microsoft Edge affected versions not specified Description The issue is related to a Use-After-Free in the Accessibility component, which could allow a remote attacker to potentially exploit heap...

10CVSS0.00686EPSS
SaveExploits0
Mend
Mend
•added 2022/11/29 12:00 a.m.•1 views

CVE-2022-4194

Use after free in Accessibility in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS0.00686EPSS
SaveExploits0References6
FreeBSD
FreeBSD
•added 2022/11/29 12:00 a.m.•57 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 28 security fixes, including: 1379054 High CVE-2022-4174: Type Confusion in V8. Reported by Zhenghang Xiao @Kipreyyy on 2022-10-27 1381401 High CVE-2022-4175: Use after free in Camera Capture. Reported by Leecraso and Guang Gong of 360 Alpha Lab on...

8.8CVSS0.1AI score0.23918EPSS
SaveExploits1References1
OSV
OSV
•added 2022/11/18 11:15 p.m.•15 views

CVE-2022-41643

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Accessibility plugin = 1.0.3 on WordPress...

4.8CVSS5.8AI score0.00448EPSS
SaveExploits0References2
NVD
NVD
•added 2022/11/18 11:15 p.m.•29 views

CVE-2022-41643

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Accessibility plugin = 1.0.3 on WordPress...

4.8CVSS0.00448EPSS
SaveExploits0References2
Mend
Mend
•added 2022/11/18 10:21 p.m.•2 views

CVE-2022-41643

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Accessibility plugin = 1.0.3 on WordPress...

4.8CVSS0.00448EPSS
SaveExploits0References2
CVE
CVE
•added 2022/11/18 10:21 p.m.•75 views

CVE-2022-41643

CVE-2022-41643 affects the WordPress Accessibility plugin (versions ≤ 1.0.3). The root cause is a stored XSS vulnerability in the plugin’s settings that requires admin+ privileges to exploit. Impact is limited to authenticated users with high privileges; CVSS vectors in the source material indica...

4.8CVSS4.8AI score0.00448EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
•added 2022/11/18 10:21 p.m.•35 views

CVE-2022-41643 WordPress Accessibility plugin <= 1.0.3 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Accessibility plugin = 1.0.3 on WordPress...

4.8CVSS5.1AI score0.00448EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/11/18 12:00 a.m.•14 views

WordPress plugin Accessibility 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

4.8CVSS5AI score0.00448EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/18 12:00 a.m.•4 views

CVE-2022-41643: Improper Neutralization of Input During Web Page Generation

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Accessibility plugin = 1.0.3 on WordPress...

4.8CVSS5.8AI score0.00448EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/11/18 12:00 a.m.•15 views

PT-2022-26000 · Unknown · Accessibility Plugin

Name of the Vulnerable Software and Affected Versions: Accessibility plugin versions prior to 1.0.4 Description: The issue is related to a Stored Cross-Site Scripting XSS vulnerability that requires authentication with admin or higher privileges. Recommendations: For versions prior to 1.0.4, upda...

4.8CVSS4.9AI score0.00448EPSS
SaveExploits0References4
Veracode
Veracode
•added 2022/11/17 12:54 a.m.•27 views

Use After Free

chromium is vulnerable to use after free. The vulnerability exists in Accessibility in Google Chrome on Chrome OS which allows a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions...

8.8CVSS8.5AI score0.00594EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder