Security Vulnerabilities fixed in Firefox 103 — Mozilla

When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed. When visiting a website with an overly long URL, the user interface would start to hang. Due to session restore, this could lead to a permanent Denial of Service.Th...

CVE-2022-1138

Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2022-1138

Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox URL bar via a crafted HTML page...

Design/Logic Flaw

Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox URL bar via a crafted HTML page...

UBUNTU-CVE-2022-1138

Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2022-1138

Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2022-1138

CVE-2022-1138 affects Google Chrome (Chromium-based) before 100.0.4896.60. The vulnerability is caused by an inappropriate implementation in the Web Cursor component, which could allow a remote attacker with renderer access to obscure the Omnibox (URL bar) via a crafted HTML page. Remediation per...

CVE-2022-1138

Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2022-1138

Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2022-1138: Improper Restriction of Rendered UI Layers or Frames

Inappropriate implementation in Web Cursor in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who had compromised the renderer process to obscure the contents of the Omnibox URL bar via a crafted HTML page...

CLSA-2022-1657817751 Fixed CVEs in vim: CVE-2022-2183, CVE-2022-2182, CVE-2022-2207, CVE-2022-2210

CVE-2022-2182: when on line zero check the column is valid for line one - CVE-2022-2183: avoid going over the NUL at the end of the line - CVE-2022-2207: check the cursor column is more than zero - CVE-2022-2210: use zero offset when change removes all lines in a diff block...

Fixed CVEs in vim: CVE-2022-2183, CVE-2022-2182, CVE-2022-2207, CVE-2022-2210

CVE-2022-2182: when on line zero check the column is valid for line one - CVE-2022-2183: avoid going over the NUL at the end of the line - CVE-2022-2207: check the cursor column is more than zero - CVE-2022-2210: use zero offset when change removes all lines in a diff block...

CLSA-2022-1657816156 Fixed CVEs in vim: CVE-2022-2210, CVE-2022-2183, CVE-2022-2207, CVE-2022-2182

CVE-2022-2182: when on line zero check the column is valid for line one - CVE-2022-2183: avoid going over the NUL at the end of the line - CVE-2022-2207: check the cursor column is more than zero - CVE-2022-2210: use zero offset when change removes all lines in a diff block...

GSD-2022-1003374 drm: msm: fix possible memory leak in mdp5_crtc_cursor_set()

drm: msm: fix possible memory leak in mdp5crtccursorset This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.46 by commit...

PT-2022-32169

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description A potential memory leak issue exists in the mdp5 crtc cursor set function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.0 and i...

PT-2022-31855

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description A potential memory leak issue exists in the mdp5 crtc cursor set function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.0 and i...

PT-2022-31351

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.17.14 Description The issue is related to a possible memory leak in the mdp5 crtc cursor set function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32032

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.198 Description A potential memory leak issue exists in the mdp5 crtc cursor set function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.0 and is...

PT-2022-31011

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A potential memory leak issue exists in the mdp5 crtc cursor set function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.0 and is...

PT-2022-31637

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description A potential memory leak issue exists in the mdp5 crtc cursor set function. The actual impact and attack plausibility have not yet been proven. This issue was introduced in version v4.0 and is...