2493 matches found
Debian dsa-5612 : chromium - security update
The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5612 advisory. - Use after free in Peer Connection in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML...
BIT-CANVASLMS-2020-5775
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains...
BIT-CANVASLMS-2021-36539
Instructure Canvas LMS didn't properly deny access to locked/unpublished files when the unprivileged user access the DocViewer based file preview URL canvadocsessionurl...
CVE-2024-1060
Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2024-1060
Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-1060
Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-1060
CVE-2024-1060 is a Chrome/Chromium issue described as a use-after-free in the Canvas module that could enable remote heap corruption via a crafted HTML page prior to version 121.0.6167.139. The affected product is Google Chrome/Chromium; the root cause is a memory management bug in Canvas. The pu...
CVE-2024-1060
Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-1060
Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2024-1060
Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Canvas module, which can be exploited by an attacker to execute arbitrary code on a system...
CVE-2024-1060: Use After Free
Use after free in Canvas in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Google Chrome < 121.0.6167.139 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 121.0.6167.139. It is, therefore, affected by multiple vulnerabilities as referenced in the 202401stable-channel-update-for-desktop30 advisory. - Use after free in Network in Google Chrome prior to 121.0.6167.139 allowed ...
PT-2024-1502 · Google +6 · Google Chrome +6
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.139 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the Canvas component, which can be exploited by a remote attacker to potentially corrupt th...
Google Chrome < 121.0.6167.139 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 121.0.6167.139. It is, therefore, affected by multiple vulnerabilities as referenced in the 202401stable-channel-update-for-desktop30 advisory. - Use after free in Network in Google Chrome prior to 121.0.6167.139 allowe...
chromium -- multiple security fixes
Chrome Releases reports: This update includes 4 security fixes: 1511567 High CVE-2024-1060: Use after free in Canvas. Reported by Anonymous on 2023-12-14 1514777 High CVE-2024-1059: Use after free in WebRTC. Reported by Cassidy Kim@cassidy6564 on 2023-12-29 1511085 High CVE-2024-1077: Use after...
VulnCheck KEV: CVE-2020-5775
Server-Side Request Forgery in Canvas LMS 2020-07-29 allows a remote, unauthenticated attacker to cause the Canvas application to perform HTTP GET requests to arbitrary domains...
Malicious code in cordova-plugin-canvas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c72f98238b951534c1437dc8a7c3ee8ab8463beb50c44c59d07cccdd15829386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2024-71 Malicious code in cordova-plugin-canvas (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c72f98238b951534c1437dc8a7c3ee8ab8463beb50c44c59d07cccdd15829386 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...