SUSE: Security Advisory (SUSE-SU-2023:3289-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Vulnerability in core server (CVE-2023-39417)

Extension script @substitutions@ within quoting allow SQL injection An extension script is vulnerable if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting construct dollar quoting, '', or "". No bundled extension is vulnerable. Vulnerable uses do appear in a documentation examp...

Microsoft Windows HEVC Video Extensions RCE (August 2023)

The Windows 'HEVC Video Extensions' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploits this vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially crafted...

Update your browser: Security fixes for latest Chrome bugs

News, Security Update your browser: Security fixes for latest Chrome bugs Share August 10th, 2023 Hi everyone! Opera, Opera GX, and Opera Crypto Browser have received important updates addressing a number of vulnerabilities and bugs. Among those are the following important vulnerabilities detecte...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Aug 2023)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2023-38170

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2023-38170

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2023-38170

HEVC Video Extensions Remote Code Execution Vulnerability...

Remote code execution

HEVC Video Extensions Remote Code Execution Vulnerability...

CVE-2023-38170 HEVC Video Extensions Remote Code Execution Vulnerability

...

CVE-2023-38170

CVE-2023-38170 concerns the HEVC Video Extensions component on Windows. The vulnerability is a remote code execution issue tied to the HEVC Video Extensions, with the CVSSv3.1 vector indicating a local attack requiring user interaction and potential for arbitrary code execution with high impact (...

CVE-2023-38170 HEVC Video Extensions Remote Code Execution Vulnerability

...

Google Chrome Extensions XSS

The vulnerability of the Google Chrome browser’s Extensions component is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by loading a specially crafted extension...

Google Chrome Extensions XSS

The vulnerability of the Google Chrome browser’s Extensions component is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks by downloading a specially crafted extension...

CVE-2023-38170: Heap-based Buffer Overflow

HEVC Video Extensions Remote Code Execution Vulnerability...

Microsoft HEVC Video Extensions security vulnerabilities

Microsoft HEVC Video Extensions is a video extension application from Microsoft USA. The application enables computers and devices to read High Efficiency Video Coding or HEVC videos. A remote code execution vulnerability exists in Microsoft HEVC Video Extensions, which can be exploited by an...

PT-2023-26322 · Unknown · Hevc Video Extensions

Name of the Vulnerable Software and Affected Versions: HEVC Video Extensions affected versions not specified Description: The issue concerns a remote code execution vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details abou...

UBUNTU-CVE-2022-41804

Unauthorized error injection in IntelR SGX or IntelR TDX for some IntelR XeonR Processors may allow a privileged user to potentially enable escalation of privilege via local access...

Chromium: CVE-2023-4078 Inappropriate implementation in Extensions

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Access Restriction Bypass

chromium is vulnerable to Access Restriction Bypass. The vulnerability exists due to inappropriate implementation in Extensions in Google Chrome which allows a remote attacker who had compromised the renderer process to spoof extension storage via a crafted HTML page...