Lucene search
K

2060 matches found

OSV
OSV
added 2023/04/19 4:15 a.m.6 views

DEBIAN-CVE-2023-2135

Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

7.5CVSS7.8AI score0.01EPSS
Exploits0References1
OSV
OSV
added 2023/04/19 4:15 a.m.18 views

CVE-2023-2135

Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

7.5CVSS6.1AI score
Exploits0References10
NVD
NVD
added 2023/04/19 4:15 a.m.21 views

CVE-2023-2135

Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

7.5CVSS7.8AI score0.01EPSS
Exploits0References10
Prion
Prion
added 2023/04/19 4:15 a.m.25 views

Design/Logic Flaw

Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

5.1CVSS8.2AI score0.01EPSS
Exploits0References10Affected Software3
Cvelist
Cvelist
added 2023/04/19 3:40 a.m.27 views

CVE-2023-2135

Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.6AI score0.01EPSS
Exploits0References10
Vulnrichment
Vulnrichment
added 2023/04/19 3:40 a.m.19 views

CVE-2023-2135

Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

7.9AI score0.01EPSS
Exploits0References10
CVE
CVE
added 2023/04/19 3:40 a.m.164 views

CVE-2023-2135

CVE-2023-2135 : Use-after-free in Chromium/Google Chrome DevTools prior to 112.0.5615.137 could allow a remote attacker to trigger heap corruption via a crafted HTML page after convincing a user to enable preconditions. Impact aligns with a high-severity heap corruption scenario. Affected product...

7.5CVSS8.2AI score0.01EPSS
Exploits0References10Affected Software1
Debian CVE
Debian CVE
added 2023/04/19 3:40 a.m.23 views

CVE-2023-2135

Use after free in DevTools in Google Chrome prior to 112.0.5615.137 allowed a remote attacker who convinced a user to enable specific preconditions to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

7.5CVSS8.9AI score0.01EPSS
Exploits0
CNNVD
CNNVD
added 2023/04/19 12:0 a.m.3 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in versions prior to Google Chrome 112.0.5615.137, which stems from a confusion in the directive responsible for freeing memory in DevTools. An attacker could use this vulnerability to caus...

7.5CVSS6.6AI score0.01EPSS
Exploits0References14
Tenable Nessus
Tenable Nessus
added 2023/04/19 12:0 a.m.149 views

Google Chrome < 112.0.5615.137 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 112.0.5615.137. It is, therefore, affected by multiple vulnerabilities as referenced in the 202304stable-channel-update-for-desktop18 advisory. - Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed...

9.6CVSS8AI score0.05786EPSS
Exploits0References11
BDU FSTEC
BDU FSTEC
added 2023/04/04 12:0 a.m.1 views

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge browsers allows attackers to escalate their privileges.

The vulnerability of the DevTools suite for web development in Google Chrome and Microsoft Edge is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

7.5CVSS6.8AI score0.0042EPSS
Exploits0References11Affected Software5
BDU FSTEC
BDU FSTEC
added 2023/03/27 12:0 a.m.1 views

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DevTools suite for web development in the Google Chrome browser relates to the use of memory after it is released. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a...

10CVSS7.7AI score0.00541EPSS
Exploits0References11Affected Software5
vulnersOsv
vulnersOsv
added 2023/03/23 9:30 p.m.3 views

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.0 <=4.4.0.1), ai.dev-tools:ai-devtools (>=0.1.12 <=0.1.20) +35838 more potentially affected by CVE-2023-20861 via org.springframework:spring-expression (>=3.0.0.RELEASE <=5.2.22.RELEASE)

org.springframework:spring-expression MAVEN version =3.0.0.RELEASE, =4.4.0.0, =0.1.12, =0.1.6, =0.1.8, =0.1.6, =0.1.2, =0.0.6, =0.0.11, =0.0.16, =0.0.1, =0.0.47, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.21 and more Source cves: CVE-2023-20861 Source advisory: OSV:GHSA-564R-HJ7V-MCR5...

6.5CVSS6.6AI score0.0097EPSS
Exploits1
The Hacker News
The Hacker News
added 2023/03/23 7:37 a.m.60 views

German and South Korean Agencies Warn of Kimsuky's Expanding Cyber Attack Tactics

German and South Korean government agencies have warned about cyber attacks mounted by a threat actor tracked as Kimsuky using rogue browser extensions to steal users' Gmail inboxes. The joint advisory comes from Germany's domestic intelligence apparatus, the Federal Office for the Protection of...

6.4AI score
Exploits0
OpenVAS
OpenVAS
added 2023/03/23 12:0 a.m.24 views

Google Chrome Security Update (stable-channel-update-for-desktop_21-2021-09) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS7.4AI score0.01662EPSS
Exploits3References1
Tenable Nessus
Tenable Nessus
added 2023/03/14 12:0 a.m.43 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0068-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0068-1 advisory. - Use after free in Swiftshader in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption via a...

8.8CVSS7.5AI score0.01163EPSS
Exploits7References50
Microsoft CVE
Microsoft CVE
added 2023/03/13 7:0 a.m.27 views

Chromium: CVE-2023-1235 Type Confusion in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.3CVSS7AI score0.0042EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2023/03/13 7:0 a.m.58 views

Chromium: CVE-2023-1216 Use after free in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.7AI score0.00541EPSS
Exploits0
CNVD
CNVD
added 2023/03/13 12:0 a.m.27 views

Google Chrome DevTools Resource Management Error Vulnerability (CNVD-2023-17525)

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a confusion in the DevTools component's instructions for freeing memory. A remote attacker could exploit the vulnerability to cause heap corruption v...

8.8CVSS2.4AI score0.00541EPSS
Exploits0References1
CNVD
CNVD
added 2023/03/13 12:0 a.m.23 views

Google Chrome DevTools Component Type Mixing Vulnerability

Google Chrome is a web browser from Google, Inc. A type-mangling vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a type-mangling issue in the DevTools component. A remote attacker could exploit this vulnerability to cause heap corruption via crafted UI...

6.3CVSS4.5AI score0.0042EPSS
Exploits0References1
Rows per page
Query Builder