Lucene search
+L

3168 matches found

OSV
OSV
added 2022/09/26 4:15 p.m.8 views

UBUNTU-CVE-2022-3198

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

8.8CVSS7.3AI score0.00629EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/09/26 4:15 p.m.96 views

CVE-2022-3197

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

8.8CVSS7.2AI score0.0087EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/26 4:15 p.m.6 views

UBUNTU-CVE-2022-3197

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

8.8CVSS7.3AI score0.0087EPSS
SaveExploits0References2
Prion
Prion
added 2022/09/26 4:15 p.m.28 views

Design/Logic Flaw

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

6.8CVSS8.8AI score0.00873EPSS
SaveExploits0References4Affected Software2
AlpineLinux
AlpineLinux
added 2022/09/26 12:00 a.m.71 views

CVE-2022-3198

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

8.8CVSS9AI score0.00629EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/09/26 12:00 a.m.71 views

CVE-2022-3197

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

8.8CVSS9AI score0.0087EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2022/09/26 12:00 a.m.117 views

CVE-2022-3198

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

8.8CVSS9.5AI score0.00629EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2022/09/26 12:00 a.m.59 views

CVE-2022-3196

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

8.8CVSS9.5AI score0.00873EPSS
SaveExploits0
CVE
CVE
added 2022/09/26 12:00 a.m.154 views

CVE-2022-3198

CVE-2022-3198 involves a use-after-free in PDF handling in Google Chrome (Chromium) prior to version 105.0.5195.125 , allowing a remote attacker to potentially exploit heap corruption via a crafted PDF file. The vulnerability affects Chromium-based Chrome and related builds (as reflected in multi...

8.8CVSS8.8AI score0.00629EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2022/09/26 12:00 a.m.179 views

CVE-2022-3196

Concrete details confirm CVE-2022-3196 affects Chromium/Google Chrome PDF handling with a use-after-free leading to possible heap corruption via crafted PDFs, fixed in upstream Chrome/Chromium at version 105.0.5195.125 and newer. Public sources describe the vulnerability as a PDF memory reuse-aft...

8.8CVSS8.8AI score0.00873EPSS
SaveExploits0References5Affected Software1
OSV
OSV
added 2022/09/20 5:26 p.m.8 views

USN-5618-1 ghostscript vulnerability

It was discovered the Ghostscript incorrectly handled memory when processing certain inputs. By tricking a user into opening a specially crafted PDF file, an attacker could cause the program to crash...

7.1CVSS7.1AI score0.00462EPSS
SaveExploits0References2
Veracode
Veracode
added 2022/09/19 2:37 p.m.30 views

Use After Free

chromium is vulnerable use after free. Use after free in PDF in Google Chrome allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

8.8CVSS8.9AI score0.00873EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
added 2022/09/19 2:36 p.m.29 views

Use After Free

chromium is vulnerable use after free. It allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file...

8.8CVSS8.5AI score0.0087EPSS
SaveExploits0References6Affected Software2
Veracode
Veracode
added 2022/09/18 10:58 a.m.21 views

Denial Of Service (DoS)

pdfresurrect is vulnerable to denial of service. The vulnerability exists because of an infinite loop in getxreflinearskipped in pdf.c which allows an attacker to crash the application via a crafted PDF file...

5.5CVSS5.4AI score0.00762EPSS
SaveExploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/09/14 12:00 a.m.95 views

Google Chrome < 105.0.5195.125 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 105.0.5195.125. It is, therefore, affected by multiple vulnerabilities as referenced in the 202209stable-channel-update-for-desktop14 advisory. - Heap buffer overflow in Internals in Google Chrome prior to 105.0.5195.12...

8.8CVSS7.7AI score0.0198EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
added 2022/09/09 12:00 a.m.38 views

SUSE SLED12: ImageMagick / ImageMagick-config-6-SUSE / etc (SUSE-SU-2022:3138-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3138-1 advisory. - CVE-2021-20224: Fixed an integer overflow that could be triggered via a crafted file bsc1202800. Tenable has extracte...

5.5CVSS6.9AI score0.00384EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2022/09/05 6:58 a.m.35 views

CVE-2021-20224

An integer overflow issue was found in ImageMagick's ExportIndexQuantum function in MagickCore/quantum-export.c. Function calls to GetPixelIndex could result in outside the range of representable values for the type 'unsigned char.' When ImageMagick processes a crafted pdf file, this issue could...

5.5CVSS2.6AI score0.00384EPSS
SaveExploits0References4
OSV
OSV
added 2022/08/30 3:15 a.m.1 views

DEBIAN-CVE-2022-38784

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder JBIG2Stream::readTextRegionSeg in JBIGStream.cc. Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described...

7.8CVSS8.6AI score0.00586EPSS
SaveExploits1References1
OSV
OSV
added 2022/08/30 3:15 a.m.7 views

UBUNTU-CVE-2022-38784

Poppler prior to and including 22.08.0 contains an integer overflow in the JBIG2 decoder JBIG2Stream::readTextRegionSeg in JBIGStream.cc. Processing a specially crafted PDF file or JBIG2 image could lead to a crash or the execution of arbitrary code. This is similar to the vulnerability described...

7.8CVSS7AI score0.00586EPSS
SaveExploits1References9
BDU FSTEC
BDU FSTEC
added 2022/08/29 12:00 a.m.10 views

The vulnerability of the PDF-XChange PDF document viewing and editing program, related to the occurrence of operations outside the buffer in memory, allows a hacker to execute arbitrary code.

The vulnerability of the PDF document viewing and editing software PDF-XChange lies in the execution of operations outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created malicious PDF file...

10CVSS8AI score0.00777EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder