Lucene search
K

18 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в chromium

Before version 114.0.5735.133, using Autofill for payment processing in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Critical...

8.8CVSS7.3AI score0.01559EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/02 12:0 a.m.1 views

The vulnerability of the Autofill Payments function in browsers Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Autofill Payments function in Google Chrome and Microsoft Edge browsers relates to the possibility of exploiting memory after deallocation. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created HTML page...

10CVSS7.7AI score0.01303EPSS
Exploits0References11Affected Software7
Veracode
Veracode
added 2023/06/23 9:53 p.m.24 views

Use After Free

Google Chrome is vulnerable to Use After Free. The vulnerability exists in the autofill payments of the library, which allows an attacker to cause heap corruptions via a maliciously crafted HTML page...

8.8CVSS6.5AI score0.01559EPSS
Exploits0References8Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/06/19 12:0 a.m.23 views

Fedora 38 : chromium (2023-5f35718d4c)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-5f35718d4c advisory. Update to 114.0.5735.133. Fixes the following security issues: CVE-2023-3214, CVE-2023-3215, CVE-2023-3215, CVE-2023-3217, Tenable has extracted the...

8.8CVSS8.2AI score0.1839EPSS
Exploits0References5
CNVD
CNVD
added 2023/06/19 12:0 a.m.7 views

Google Chrome Autofill payments code execution vulnerability

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome Autofill payments, which can be exploited by an attacker to execute arbitrary code on a system or cause an application to crash...

8.8CVSS7.5AI score0.01559EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2023/06/15 7:0 a.m.29 views

Chromium: CVE-2023-3214 Use after free in Autofill payments

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.01559EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/06/15 12:55 a.m.1 views

SUSE CVE-2023-3214

Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS9.2AI score0.01559EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2023/06/15 12:0 a.m.2 views

The vulnerability of the Autofill Payments function in Google Chrome browser allows for the insertion of arbitrary codes.

The vulnerability of Google Chrome’s Autofill Payments function is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS8AI score0.01559EPSS
Exploits0References6Affected Software3
UbuntuCve
UbuntuCve
added 2023/06/13 6:15 p.m.23 views

CVE-2023-3214

Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS7.2AI score0.01559EPSS
Exploits0References4
Prion
Prion
added 2023/06/13 6:15 p.m.21 views

Design/Logic Flaw

Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

6.8CVSS8.8AI score0.01559EPSS
Exploits0References7Affected Software3
Cvelist
Cvelist
added 2023/06/13 5:51 p.m.19 views

CVE-2023-3214

Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

9.1AI score0.01559EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2023/06/13 5:51 p.m.5 views

CVE-2023-3214

Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

9AI score0.01559EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2023/06/13 12:0 a.m.25 views

FreeBSD : chromium -- multiple vulnerabilities (1567be8c-0a15-11ee-8290-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1567be8c-0a15-11ee-8290-a8a1599412c6 advisory. - Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remot...

8.8CVSS8.2AI score0.1839EPSS
Exploits0References6
CNNVD
CNNVD
added 2023/06/13 12:0 a.m.4 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome Autofill payments, which can be exploited by an attacker to execute arbitrary code on a system or cause an application to crash...

8.8CVSS7.9AI score0.01559EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2023/06/13 12:0 a.m.25 views

Google Chrome < 114.0.5735.133 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 114.0.5735.133. It is, therefore, affected by multiple vulnerabilities as referenced in the 202306stable-channel-update-for-desktop13 advisory. - Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a...

8.8CVSS8.3AI score0.1839EPSS
Exploits0References9
Tenable Nessus
Tenable Nessus
added 2023/06/13 12:0 a.m.32 views

Google Chrome < 114.0.5735.133 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 114.0.5735.133. It is, therefore, affected by multiple vulnerabilities as referenced in the 202306stable-channel-update-for-desktop13 advisory. - Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed ...

8.8CVSS8.3AI score0.1839EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2023/06/13 12:0 a.m.5 views

PT-2023-3077 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.133 Description: The issue is related to a use after free in Autofill payments, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to...

10CVSS7.5AI score0.93301EPSS
Exploits131References1119
FreeBSD
FreeBSD
added 2023/06/13 12:0 a.m.23 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 5 security fixes: 1450568 Critical CVE-2023-3214: Use after free in Autofill payments. Reported by Rong Jian of VRI on 2023-06-01 1446274 High CVE-2023-3215: Use after free in WebRTC. Reported by asnine on 2023-05-17 1450114 High CVE-2023-3216: Type...

8.8CVSS7.4AI score0.1839EPSS
Exploits0References1
Rows per page
Query Builder