Lucene search
+L

850 matches found

BDU FSTEC
BDU FSTEC
•added 2023/02/10 12:00 a.m.•12 views

The vulnerability of the Data Transfer component in the Google Chrome web browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Data Transfer component in the Google Chrome web browser is related to errors in data type conversion. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created HTML page...

7.8CVSS7.6AI score0.00715EPSS
SaveExploits0References6Affected Software4
Microsoft CVE
Microsoft CVE
•added 2023/02/09 8:57 p.m.•58 views

Chromium: CVE-2023-0702 Type Confusion in Data Transfer

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00715EPSS
SaveExploits0
Kaspersky
Kaspersky
•added 2023/02/09 12:00 a.m.•56 views

KLA20224 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out of bounds read vulnerability in...

8.8CVSS9.6AI score0.01067EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
•added 2023/02/08 12:00 a.m.•12 views

The vulnerability of Mozilla Firefox and Firefox ESR browsers, related to errors in interpreting data loaded in multiple ways, allows attackers to read arbitrary files.

The vulnerability of Mozilla Firefox and Firefox ESR browsers is related to errors in interpreting data loaded in multiple ways. Exploiting this vulnerability allows a remote attacker to read arbitrary files by calling DataTransfer.setData...

7.6CVSS7.1AI score0.00641EPSS
SaveExploits0References13Affected Software6
OSV
OSV
•added 2023/02/07 9:15 p.m.•7 views

DEBIAN-CVE-2023-0702

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS8.2AI score0.00715EPSS
SaveExploits0References1
OSV
OSV
•added 2023/02/07 9:15 p.m.•18 views

CVE-2023-0702

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS5.6AI score
SaveExploits0References3
attackerkb
attackerkb
•added 2023/02/07 9:15 p.m.•8 views

CVE-2023-0702

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.3AI score0.00715EPSS
SaveExploits0References4
Prion
Prion
•added 2023/02/07 9:15 p.m.•23 views

Type confusion

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

6.8CVSS8.4AI score0.00715EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2023/02/07 9:15 p.m.•6 views

UBUNTU-CVE-2023-0702

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS7.3AI score0.00715EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2023/02/07 12:00 a.m.•14 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 110.0.5481.77 that stems from a type confusion issue during data transfer. An attacker exploits the vulnerability to cause heap corruption via UI interaction...

8.8CVSS8.2AI score0.00715EPSS
SaveExploits0References8
Debian CVE
Debian CVE
•added 2023/02/07 12:00 a.m.•48 views

CVE-2023-0702

Type confusion in Data Transfer in Google Chrome prior to 110.0.5481.77 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

8.8CVSS9.1AI score0.00715EPSS
SaveExploits0
Kaspersky
Kaspersky
•added 2023/02/07 12:00 a.m.•128 views

KLA20220 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Full screen mode can be exploited to cause denial of service...

8.8CVSS9.4AI score0.00981EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2023/01/25 3:33 p.m.•19 views

Mozilla: Arbitrary file read from GTK drag and drop on Linux

The Mozilla Foundation Security Advisory describes this flaw as: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData...

6.5CVSS7.3AI score0.00641EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2023/01/25 3:32 p.m.•13 views

Mozilla: Arbitrary file read from GTK drag and drop on Linux

The Mozilla Foundation Security Advisory describes this flaw as: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData...

6.5CVSS7.3AI score0.00641EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2023/01/25 3:30 p.m.•19 views

Mozilla: Arbitrary file read from GTK drag and drop on Linux

The Mozilla Foundation Security Advisory describes this flaw as: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData...

6.5CVSS7.3AI score0.00641EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2023/01/25 3:27 p.m.•27 views

Mozilla: Arbitrary file read from GTK drag and drop on Linux

The Mozilla Foundation Security Advisory describes this flaw as: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData...

6.5CVSS7.3AI score0.00641EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2023/01/25 3:20 p.m.•12 views

Mozilla: Arbitrary file read from GTK drag and drop on Linux

The Mozilla Foundation Security Advisory describes this flaw as: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData...

6.5CVSS7.3AI score0.00641EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2023/01/25 3:18 p.m.•18 views

Mozilla: Arbitrary file read from GTK drag and drop on Linux

The Mozilla Foundation Security Advisory describes this flaw as: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData...

6.5CVSS7.3AI score0.00641EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2023/01/23 10:03 a.m.•12 views

Mozilla: Arbitrary file read from GTK drag and drop on Linux

The Mozilla Foundation Security Advisory describes this flaw as: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData...

6.5CVSS7.3AI score0.00641EPSS
SaveExploits0References6
RedHat Linux
RedHat Linux
•added 2023/01/23 9:30 a.m.•11 views

Mozilla: Arbitrary file read from GTK drag and drop on Linux

The Mozilla Foundation Security Advisory describes this flaw as: Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to DataTransfer.setData...

6.5CVSS7.3AI score0.00641EPSS
SaveExploits0References6
Rows per page
Query Builder