29 matches found
chrome-exploit-simulator
Ethical Hacking — Simulateur Exploit Web Présentation Ce...
007putra-my-bot (=1.1.1), 10bis-shufersal-automation (=1.0.0) +3667 more potentially affected by CVE-2019-5786 via puppeteer (>=0.10.1 <=1.13.0-next.1552588842411)
puppeteer NPM version =0.10.1, =0.2.0, =1.0.0, =1.0.0, =4.2.0, =0.1.0, =0.3.0, =1.0.0, =1.6.1, =1.2.1, =0.0.1, =0.1.0, =0.8.3 and more Source cves: CVE-2019-5786 Source advisory: OSV:GHSA-C2GP-86P4-5935...
Exploit for Use After Free in Google Chrome
PoC exploit for CVE-2019-5786, a FileReader Use-After-Free UAF vulnerability in Chrome 72.0.3626.119 stable for Windows 7 x86. The exploit uses site-isolation to brute-force the vulnerability. The target is the FileReader object, which is used to read files from the local file system. The exploit...
CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
UBUNTU-CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
CVE-2019-5786
CVE-2019-5786 corresponds to a heap use-after-free in Google Chrome’s Blink layer affecting the FileReader API, enabling a remote attacker to potentially cause out-of-bounds memory access via a crafted HTML page. The CVE is documented as a vulnerability in Blink prior to 72.0.3626.121, with the v...
CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page...
CVE-2019-5786
Object lifetime issue in Blink in Google Chrome prior to 72.0.3626.121 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Google Chrome 72.0.3626.119 - 'FileReader' Use-After-Free (Metasploit)
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Chrome 72.0.3626.119 FileReader UaF exploit for Windows 7 x86', 'Description' = %q This exploit takes advantage of a use after free vulnerability...
Use-After-Free
Overview Versions of puppeteer prior to 1.13.0 are vulnerable to the Use-After-Free vulnerability in Chromium CVE-2019-5786. The Chromium FileReader API is vulnerable to Use-After-Free which may lead to Remote Code Execution. Recommendation Upgrade to version 1.13.0 or later. References - GitHub...
GLSA-201903-23 : Chromium: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201903-23 Chromium: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the referenced CVE identifiers and Google Chrome Releases for details. Impact : Please review...
OPENSUSE-SU-2019:0298-1 Security update for chromium
This update for chromium fixes the following issues: Chromium was updated: to 72.0.3626.121: CVE-2019-5786: Use-after-free in FileReader fixed boo1127602 Feature fixes update only...
Microsoft Patches Two Win32k Bugs Under Active Attack
Microsoft released patches for two Win32k bugs actively under attack, along with fixes for four additional bugs that are publicly known, as part of its March Patch Tuesday security bulletin. The Win32k bugs are both elevation of privilege vulnerabilities, rated important, and tied to the way...
[SECURITY] [DSA 4404-1] chromium security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4404-1 [email protected] https://www.debian.org/security/ Michael Gilbert March 09, 2019 https://www.debian.org/security/faq -...
Google Chrome zero-day: Now is the time to update and restart your browser
Update 2019-03-21 A proof of concept for CVE-2019-5786 was published by Exodus Intel. In our earlier post we exercised caution before claiming we would have blocked this zero-day, but we can now say with confidence that an older version of Malwarebytes 1.12.1.122 would have mitigated this attack:...
openSUSE Security Update : chromium (openSUSE-2019-298)
This update for chromium fixes the following issues : Chromium was updated: to 72.0.3626.121 : - CVE-2019-5786: Use-after-free in FileReader fixed boo1127602 - Feature fixes update only %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin wer...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2019:0298-1 Rating: important References: 1127602 Cross-References: CVE-2019-5786 Affected Products: openSUSE Leap 42.3 openSUSE Leap 15.0 openSUSE Backports SLE-15 SUSE Package Hub for SUSE Linux Enterprise 12 An...