Lucene search
+L

4302 matches found

osv_debian
osv_debian
•added 2018/06/11 9:29 p.m.•10 views

DEBIAN-CVE-2017-5464

During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

9.8CVSS8.9AI score0.0256EPSS
SaveExploits0References1
Prion
Prion
•added 2018/06/11 9:29 p.m.•21 views

Memory corruption

During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

7.5CVSS9.1AI score0.0256EPSS
SaveExploits0References11Affected Software10
Mend
Mend
•added 2018/06/11 9:00 p.m.•4 views

CVE-2017-5464

During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

9.8CVSS0.0256EPSS
SaveExploits0References14
Cvelist
Cvelist
•added 2018/06/11 9:00 p.m.•47 views

CVE-2017-5464

During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

8.4AI score0.0256EPSS
SaveExploits0References11
CVE
CVE
•added 2018/06/11 9:00 p.m.•203 views

CVE-2017-5464

CVE-2017-5464 affects Mozilla products: Thunderbird

9.8CVSS8.3AI score0.0256EPSS
SaveExploits0References11Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/11 12:00 a.m.•7 views

CVE-2017-5464: Improper Restriction of Operations within the Bounds of a Memory Buffer

During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird 52.1, Firefox ESR 45.9, Firefox ESR 52.1, and Firefox 53...

9.8CVSS8.2AI score0.0256EPSS
SaveExploits0References2
NVD
NVD
•added 2018/06/08 6:29 p.m.•34 views

CVE-2018-4196

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or obtain sensitive information via a crafted app...

9.3CVSS6.9AI score0.01425EPSS
SaveExploits0References2
Prion
Prion
•added 2018/06/08 6:29 p.m.•31 views

Code injection

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or obtain sensitive information via a crafted app...

9.3CVSS6.8AI score0.01425EPSS
SaveExploits0References2Affected Software1
osv_cve
osv_cve
•added 2018/06/08 6:29 p.m.•13 views

CVE-2018-4196

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or obtain sensitive information via a crafted app...

7.8CVSS6.1AI score0.01425EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2018/06/08 6:00 p.m.•42 views

CVE-2018-4196

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or obtain sensitive information via a crafted app...

6.7AI score0.01425EPSS
SaveExploits0References2
CVE
CVE
•added 2018/06/08 6:00 p.m.•92 views

CVE-2018-4196

CVE-2018-4196 affects macOS High Sierra 10.13.x prior to 10.13.5, specifically the Accessibility Framework. The issue could allow a malicious, crafted app to execute arbitrary code with system privileges or disclose sensitive information. Apple describes an information‑disclosure/remote‑style ris...

9.3CVSS6.6AI score0.01425EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/06/08 12:00 a.m.•5 views

CVE-2018-4196: Exposure of Sensitive Information to an Unauthorized Actor

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Accessibility Framework" component. It allows attackers to execute arbitrary code in a privileged context or obtain sensitive information via a crafted app...

9.3CVSS7.8AI score0.01425EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/06/08 12:00 a.m.•2 views

PT-2018-1361

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13.5 Description The issue is related to the Accessibility Framework component and involves insufficient access restrictions. Exploitation of this issue may allow an attacker to execute arbitrary code with system...

9.3CVSS0.01425EPSS
SaveExploits0References13
CNVD
CNVD
•added 2018/06/04 12:00 a.m.•18 views

Apple macOS High Sierra Accessibility Framework Information Disclosure Vulnerability

Apple macOS High Sierra is a specialized operating system developed by Apple for Mac computers.Accessibility Framework is one of the accessibility components. A security vulnerability exists in the Accessibility Framework component in Apple macOS High Sierra versions prior to 10.13.5. An attacker...

9.3CVSS7.4AI score0.01425EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2018/05/31 12:00 a.m.•21 views

LLVM Component Xcode Data Compromise

The vulnerability of the LLVM component in the Xcode integrated software development environment is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS5.5AI score0.02403EPSS
SaveExploits0References7Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/05/25 12:00 a.m.•16 views

Qualcomm Android Data Compromise

The vulnerability of the Qualcomm Android operating system stems from buffer overflows. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.8AI score0.01281EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/05/25 12:00 a.m.•19 views

Qualcomm Access Control Policy Component Data Compromise

The vulnerability of the Qualcomm Access Control Policy component in the Android operating system is related to insufficient access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.5AI score0.01123EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/05/25 12:00 a.m.•21 views

Qualcomm GPT Listener Component Data Compromise

The vulnerability of the Qualcomm GPT listener component in the Android operating system arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected...

10CVSS5.8AI score0.01281EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/05/25 12:00 a.m.•13 views

Qualcomm Android Data Compromise

The vulnerability of the Android operating system arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS5.8AI score0.01185EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2018/05/25 12:00 a.m.•20 views

Qualcomm Permission Android Privilege Escalation

The vulnerability of the Qualcomm Permission component in the Android operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information...

10CVSS5.5AI score0.01185EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder