Lucene search
+L

2499 matches found

Cvelist
Cvelist
added 2022/02/12 1:35 a.m.31 views

CVE-2022-0301

Heap buffer overflow in DevTools in Google Chrome prior to 97.0.4692.99 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

8.6AI score0.00454EPSS
SaveExploits0References2
NVD
NVD
added 2022/02/12 12:15 a.m.19 views

CVE-2022-0097

Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page...

9.6CVSS0.00894EPSS
SaveExploits0References5
ATTACKERKB
ATTACKERKB
added 2022/02/12 12:15 a.m.7 views

CVE-2022-0097

Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page...

9.6CVSS7.7AI score0.00894EPSS
SaveExploits0References9
OSV
OSV
added 2022/02/12 12:15 a.m.1 views

DEBIAN-CVE-2022-0097

Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page...

9.6CVSS8.3AI score0.00894EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/12 12:15 a.m.8 views

CVE-2022-0097

Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page...

9.6CVSS8.9AI score
SaveExploits0References5
Prion
Prion
added 2022/02/12 12:15 a.m.26 views

Design/Logic Flaw

Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page...

6.8CVSS8.7AI score0.00894EPSS
SaveExploits0References5Affected Software2
UbuntuCve
UbuntuCve
added 2022/02/12 12:15 a.m.40 views

CVE-2022-0097

Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page...

9.6CVSS7.2AI score0.00894EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/12 12:15 a.m.7 views

UBUNTU-CVE-2022-0097

Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page...

9.6CVSS7.3AI score0.00894EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2022/02/11 11:35 p.m.52 views

CVE-2022-0097

Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page...

9.6CVSS9.2AI score0.00894EPSS
SaveExploits0
CVE
CVE
added 2022/02/11 11:35 p.m.130 views

CVE-2022-0097

CVE-2022-0097 involves an Inappropriate implementation in Chrome DevTools prior to 97.0.4692.71, where a user who installs a malicious extension could potentially allow the extension to escape the sandbox via a crafted HTML page. Reports in multiple sources (Chrome Release notes, Debian security ...

9.6CVSS8.7AI score0.00894EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2022/02/11 11:35 p.m.35 views

CVE-2022-0097

Inappropriate implementation in DevTools in Google Chrome prior to 97.0.4692.71 allowed an attacker who convinced a user to install a malicious extension to to potentially allow extension to escape the sandbox via a crafted HTML page...

9AI score0.00894EPSS
SaveExploits0References5
Mageia
Mageia
added 2022/02/02 9:29 p.m.87 views

Updated chromium-browser-stable packages fix security vulnerability

CVE-2022-0096: Use after free in Storage. CVE-2022-0097: Inappropriate implementation in DevTools. CVE-2022-0098: Use after free in Screen Capture. CVE-2022-0099: Use after free in Sign-in. CVE-2022-0100: Heap buffer overflow in Media streams API. CVE-2022-0101: Heap buffer overflow in Bookmarks...

9.6CVSS8.5AI score0.85352EPSS
SaveExploits21References3
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.24 views

Mageia: Security Advisory (MGASA-2020-0209)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.6AI score0.05803EPSS
SaveExploits0References5
Kaspersky
Kaspersky
added 2022/01/26 12:0 a.m.43 views

KLA12435 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Task Manager can be exploited to execute arbitrary code or caus...

9.6CVSS9.5AI score0.85352EPSS
SaveExploits0References4
Veracode
Veracode
added 2022/01/23 11:17 p.m.19 views

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to the heap buffer overflow in DevTools, allowing an attacker to cause an application crash...

7.8CVSS2.9AI score0.00454EPSS
SaveExploits0References3Affected Software2
Microsoft CVE
Microsoft CVE
added 2022/01/20 8:0 a.m.49 views

Chromium: CVE-2022-0301 Heap buffer overflow in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

7.8CVSS8.2AI score0.00454EPSS
SaveExploits0
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2022/01/19 12:0 a.m.190 views

Stable Channel Update for Desktop

The Stable channel has been updated to 97.0.4692.99 for Windows, Mac and Linux which will roll out over the coming days/weeks. Extended stable channel has also been updated to 96.0.4664.110 for Windows and Mac which will roll out over the coming days/weeks A full list of changes in this build is...

9.6CVSS8.9AI score0.85352EPSS
SaveExploits0Affected Software1
Kaspersky
Kaspersky
added 2022/01/19 12:0 a.m.487 views

KLA12429 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Service Worker API can be exploited to cause denial of servic...

9.6CVSS9.6AI score0.85352EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2022/01/19 12:0 a.m.14 views

The vulnerability of the “Copy as curl” function in the Thunderbird email client’s DevTools, as well as in browsers like Firefox and Firefox ESR, allows a hacker to execute arbitrary commands within the system.

The vulnerability of the “Copy as curl” function in the Thunderbird email client’s DevTools, as well as in Firefox and Firefox ESR browsers, is related to the execution of arbitrary commands on the target system due to improper input validation. Exploiting this vulnerability allows a remote...

7.1CVSS7.7AI score0.01344EPSS
SaveExploits0References10Affected Software7
Veracode
Veracode
added 2022/01/18 3:18 p.m.30 views

Command Injection

firefox-esr is vulnerable to command injection. The constructed curl command from the Copy as curl feature in DevTools is not correctly escaped from PowerShell, allowing an attacker to inject and execute malicious commands...

8.8CVSS4.9AI score0.01344EPSS
SaveExploits0References5Affected Software3
Rows per page
Query Builder