Lucene search
+L

2493 matches found

Microsoft CVE
Microsoft CVE
•added 2024/03/22 7:00 a.m.•62 views

Chromium: CVE-2024-2627 Use after free in Canvas

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00884EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2024/03/22 12:00 a.m.•32 views

Fedora 39 : chromium (2024-ec79868e3b)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-ec79868e3b advisory. Update to 123.0.6312.58 High CVE-2024-2625: Object lifecycle issue in V8 Medium CVE-2024-2626: Out of bounds read in Swiftshader Medium CVE-2024-262...

8.8CVSS7.1AI score0.21401EPSS
SaveExploits0References8
CNVD
CNVD
•added 2024/03/21 12:00 a.m.•58 views

Google Chrome Code Execution Vulnerability (CNVD-2024-16880)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by a free use in Canvas. An attacker can exploit this vulnerability to execute arbitrary code on the system...

8.8CVSS8AI score0.00884EPSS
SaveExploits0References1
OSV
OSV
•added 2024/03/20 5:15 p.m.•11 views

DEBIAN-CVE-2024-2627

Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS8.2AI score0.00884EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/03/20 5:06 p.m.•52 views

CVE-2024-2627

Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

9.1AI score0.00884EPSS
SaveExploits0References5
CVE
CVE
•added 2024/03/20 5:06 p.m.•256 views

CVE-2024-2627

CVE-2024-2627 : Use-after-free in Canvas of Google Chrome/Chromium (pre-123.0.6312.58) can allow a remote attacker to trigger heap corruption via a crafted HTML page. Impact: high. Remediation: upgrade Chromium/Chrome to a fixed build (e.g., Chromium 123.0.6312.86+ as per Debian/Chromium advisori...

8.8CVSS8.8AI score0.00884EPSS
SaveExploits0References5Affected Software1
Vulnrichment
Vulnrichment
•added 2024/03/20 5:06 p.m.•25 views

CVE-2024-2627

Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

9AI score0.00884EPSS
SaveExploits0References5
SUSE CVE
SUSE CVE
•added 2024/03/20 3:48 a.m.•3 views

SUSE CVE-2024-2627

Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS9.2AI score0.00884EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/20 12:00 a.m.•1 views

CVE-2024-2627: Use After Free

Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.2AI score0.00884EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/03/19 12:00 a.m.•14 views

PT-2024-2645 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 123.0.6312.58 Description: The issue is related to a use after free in the Canvas component, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could...

10CVSS8.4AI score0.99979EPSS
SaveExploits130References1113
CNNVD
CNNVD
•added 2024/03/19 12:00 a.m.•17 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is caused by a free use in Canvas. An attacker can exploit this vulnerability to execute arbitrary code on the system...

8.8CVSS8.1AI score0.00884EPSS
SaveExploits0References5
FreeBSD
FreeBSD
•added 2024/03/19 12:00 a.m.•40 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 12 security fixes: 327740539 High CVE-2024-2625: Object lifecycle issue in V8. Reported by Ganjiang Zhou@refrainareu of ChaMd5-H1 team on 2024-03-01 40945098 Medium CVE-2024-2626: Out of bounds read in Swiftshader. Reported by Cassidy Kim@cassidy6564 ...

8.8CVSS7.7AI score0.21401EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2024/03/19 12:00 a.m.•122 views

Google Chrome < 123.0.6312.58 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 123.0.6312.58. It is, therefore, affected by multiple vulnerabilities as referenced in the 202403stable-channel-update-for-desktop19 advisory. - Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a...

8.8CVSS7.2AI score0.21401EPSS
SaveExploits0References15
BDU FSTEC
BDU FSTEC
•added 2024/02/06 12:00 a.m.•16 views

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge browsers allows attackers to execute arbitrary code.

The vulnerability of the Canvas component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.00888EPSS
SaveExploits0References14Affected Software6
Veracode
Veracode
•added 2024/02/02 1:48 a.m.•49 views

Use After Free

Canvas in Google Chrome is vulnerable to Use after free.The vulnerability is due to referencing memory after it has been freed which allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS6.6AI score0.00888EPSS
SaveExploits0References5Affected Software3
Tenable Nessus
Tenable Nessus
•added 2024/02/02 12:00 a.m.•84 views

Microsoft Edge (Chromium) < 121.0.2277.98 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 121.0.2277.98. It is, therefore, affected by multiple vulnerabilities as referenced in the February 1, 2024 advisory. - Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attack...

8.8CVSS8.3AI score0.01231EPSS
SaveExploits0References9
Tenable Nessus
Tenable Nessus
•added 2024/02/02 12:00 a.m.•47 views

Fedora 39 : chromium (2024-87e0baecb6)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-87e0baecb6 advisory. update to 121.0.6167.139 High CVE-2024-1060: Use after free in Canvas High CVE-2024-1059: Use after free in WebRTC High CVE-2024-1077: Use after fre...

8.8CVSS8.3AI score0.00952EPSS
SaveExploits0References4
CNVD
CNVD
•added 2024/02/02 12:00 a.m.•82 views

Google Chrome Canvas Module Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Canvas module, which can be exploited by an attacker to execute arbitrary code on a system...

8.8CVSS7.8AI score0.00888EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2024/02/01 7:55 p.m.•45 views

Chromium: CVE-2024-1060 Use after free in Canvas

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.00888EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2024/02/01 12:16 a.m.•16 views

SUSE CVE-2024-1060

Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.2AI score0.00888EPSS
SaveExploits0References4
Rows per page
Query Builder