2096 matches found
DEBIAN-CVE-2023-2722
Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-2722
Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-2722
Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Design/Logic Flaw
Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-2722
Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-2722
CVE-2023-2722 describes a use-after-free in Google Chrome’s Autofill UI on Android, prior to 113.0.5672.126, enabling heap corruption via a crafted HTML page. The vulnerability is tied to the Chromium Autofill UI implementation and has been classified as High severity. Public sources indicate the...
CVE-2023-2722
Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-2722
Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Google Chrome < 113.0.5672.126 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 113.0.5672.126. It is, therefore, affected by multiple vulnerabilities as referenced in the 202305stable-channel-update-for-desktop16 advisory. - Inappropriate implementation in WebApp Installs in Google Chrome prior to...
chromium -- multiple vulnerabilities
Chrome Releases reports: This update includes 12 security fixes: 1444360 Critical CVE-2023-2721: Use after free in Navigation. Reported by Guang Gong of Alpha Lab, Qihoo 360 on 2023-05-10 1400905 High CVE-2023-2722: Use after free in Autofill UI. Reported by Rong Jian of VRI on 2022-12-14 1435166...
Google Chrome < 113.0.5672.126 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 113.0.5672.126. It is, therefore, affected by multiple vulnerabilities as referenced in the 202305stable-channel-update-for-desktop16 advisory. - Inappropriate implementation in WebApp Installs in Google Chrome prior to...
Debian dla-3423 : epiphany-browser - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3423 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3423-1 [email protected] https://www.debian.org/lts/security/...
PT-2023-2932
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 113.0.5672.126 Microsoft Edge affected versions not specified Description The issue is related to a use after free vulnerability in the Autofill UI of Google Chrome and Microsoft Edge browsers. This vulnerabilit...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions prior to Google Chrome 113.0.5672.126, which stems from a confusion in the Autofill UI instruction responsible for freeing memory. An attacker could use this vulnerability to...
CVE-2023-2722: Use After Free
Use after free in Autofill UI in Google Chrome on Android prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
The vulnerability of the Autofill function in browsers such as Google Chrome and Microsoft Edge allows attackers to carry out spear-phishing attacks.
The vulnerability of the Autofill function in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out spear-phishing attacks using a specially created HTML page...
CVE-2023-20976
In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...
CVE-2023-20976
In getConfirmationMessage of DefaultAutofillPicker.java, there is a possible way to mislead the user to select default autofill application due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed...
Google Pixel 输入验证错误漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from incorrect input validation that could mislead users into selecting default autofill apps...
PT-2023-17764 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to improper input validation in the getConfirmationMessage function of DefaultAutofillPicker.java. This could potentially mislead the user into selecting a default autofill...