Lucene search
+L

180 matches found

The Hacker News
The Hacker News
added 2019/11/01 9:32 a.m.309 views

New Chrome 0-day Bug Under Active Attacks – Update Your Browser Now!

Attention readers, if you are using Chrome on your Windows, Mac, and Linux computers, you need to update your web browsing software immediately to the latest version Google released earlier today. With the release of Chrome 78.0.3904.87, Google is warning billions of users to install an urgent...

8.8CVSS1.5AI score0.72977EPSS
SaveExploits4
CNVD
CNVD
added 2019/11/01 12:00 a.m.2 views

Audio component memory corruption vulnerability in multiple Apple products

Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Audio is an audio component of the... A security vulnerability exists in the Audio component of several Apple products. The vulnerability stems...

9.3CVSS5.5AI score0.01398EPSS
SaveExploits0References1
Kaspersky
Kaspersky
added 2019/10/31 12:00 a.m.145 views

KLA11601 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Use-after-free in PDFium can be exploited remotely via specially designed website to cause...

8.8CVSS9.2AI score0.72977EPSS
SaveExploits4References4
Mageia
Mageia
added 2019/10/23 9:06 p.m.40 views

Updated chromium-browser-stable packages fix security vulnerabilities

Chromium-browser 77.0.3865.120 fixes security issues: Four use-after-free bugs were found in Chromium 77.0.3865.90: one in the IndexedDB component CVE-2019-13693, one in the WebRTC component CVE-2019-13694, one in the audio component CVE-2019-13695, and one in the V8 component CVE-2019-13696. A...

8.8CVSS1.8AI score0.01243EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2019/01/10 12:00 a.m.12 views

The vulnerability of the WebAudio component in the Google Chrome web browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebAudio component in the Google Chrome web browser arises from an operation that goes beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

8.8CVSS7.8AI score0.01424EPSS
SaveExploits0References7Affected Software2
OSV
OSV
added 2018/04/03 6:29 a.m.4 views

CVE-2018-4094

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of...

7.8CVSS7.6AI score0.01597EPSS
SaveExploits0References7
NVD
NVD
added 2018/04/03 6:29 a.m.17 views

CVE-2018-4094

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of...

7.8CVSS7.7AI score0.01597EPSS
SaveExploits0References7
CVE
CVE
added 2018/04/03 6:00 a.m.80 views

CVE-2018-4094

CVE-2018-4094 affects Apple devices (iOS <11.2.5, macOS <10.13.3, tvOS <11.2.5, watchOS

7.8CVSS8.6AI score0.01597EPSS
SaveExploits0References7Affected Software4
CNVD
CNVD
added 2018/03/20 12:00 a.m.10 views

Google Android Qualcomm Wma Privilege Elevation Vulnerability (CNVD-2018-06011)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Wma is one of the components of Qualcomm's Wma digital audio compression format. (Qualcomm Wma is one of...

7.8CVSS7AI score0.00168EPSS
SaveExploits0References1
CNVD
CNVD
added 2018/03/20 12:00 a.m.9 views

Google Android Qualcomm Wma elevation of privilege vulnerability (CNVD-2018-06009)

Android on Google Pixel and Nexus is a Linux-based open source operating system for the Google Pixel and Nexus smartphones developed by Google and the Open Handset Alliance OHA.Qualcomm Wma is one of the components of Qualcomm's Wma digital audio compression format. (Qualcomm Wma is one of...

7.8CVSS6.9AI score0.00166EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2017/08/10 12:00 a.m.21 views

The vulnerability in the audio.c component of the QEMU hardware emulation software allows a hacker to trigger a service failure.

The vulnerability of the audio.c component of the QEMU hardware emulation software is related to a memory leak. Exploiting this vulnerability allows an attacker to cause a service failure memory consumption by repeatedly starting and stopping the sound recording process remotely...

7.8CVSS6.8AI score0.04544EPSS
SaveExploits0References3
Prion
Prion
added 2017/07/20 4:29 p.m.18 views

Memory corruption

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Audio" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service memory corruption via a crafted audio file...

6.8CVSS6.4AI score0.01036EPSS
SaveExploits0References3Affected Software1
NVD
NVD
added 2017/07/20 4:29 p.m.17 views

CVE-2017-7015

An issue was discovered in certain Apple products. macOS before 10.12.6 is affected. The issue involves the "Audio" component. It allows remote attackers to obtain sensitive information from process memory or cause a denial of service memory corruption via a crafted audio file...

7.8CVSS6.6AI score0.01036EPSS
SaveExploits0References3
CVE
CVE
added 2017/07/20 4:00 p.m.63 views

CVE-2017-7015

CVE-2017-7015 affects macOS prior to 10.12.6, involving the Audio component. The vulnerability allows a remote attacker to obtain sensitive data from process memory or trigger memory corruption leading to a denial of service via a crafted audio file, as documented in Apple Security Update 2017-00...

7.8CVSS7.2AI score0.01036EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/04/13 12:00 a.m.15 views

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to trigger service interruptions or execute arbitrary code

The vulnerability of the Audio component in iOS and Mac OS X operating systems arises from the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure memory corruption, application terminati...

6.8CVSS8.3AI score0.01729EPSS
SaveExploits0References7Affected Software2
Prion
Prion
added 2017/04/02 1:59 a.m.23 views

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of servi...

6.8CVSS7.6AI score0.01701EPSS
SaveExploits0References6Affected Software4
Prion
Prion
added 2017/04/02 1:59 a.m.32 views

Memory corruption

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of servi...

6.8CVSS7.6AI score0.01729EPSS
SaveExploits0References7Affected Software4
Cvelist
Cvelist
added 2017/04/02 1:36 a.m.25 views

CVE-2017-2462

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS before 10.12.4 is affected. tvOS before 10.2 is affected. watchOS before 3.2 is affected. The issue involves the "Audio" component. It allows remote attackers to execute arbitrary code or cause a denial of servi...

8.7AI score0.01729EPSS
SaveExploits0References7
CVE
CVE
added 2017/04/02 1:36 a.m.100 views

CVE-2017-2430

CVE-2017-2430 affects the Audio component in several Apple platforms (iOS before 10.3, macOS before 10.12.4, tvOS before 10.2, watchOS before 3.2). A crafted audio file may allow a remote attacker to execute arbitrary code or cause a memory corruption leading to a denial of service. Apple documen...

7.8CVSS8.6AI score0.01701EPSS
SaveExploits0References6Affected Software4
BDU FSTEC
BDU FSTEC
added 2017/03/23 12:00 a.m.17 views

The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure

The vulnerability of the hw/audio/es1370.c component of the QEMU hardware emulation software is related to a memory leak. Exploiting this vulnerability could allow an attacker to cause a service failure due to excessive memory consumption...

4.9CVSS7.1AI score0.00398EPSS
SaveExploits0References5
Rows per page
Query Builder