Lucene search
K

15 matches found

RedHat Linux
RedHat Linux
added 2024/06/10 7:39 p.m.4 views

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

8.8CVSS7.5AI score0.72648EPSS
Exploits15References6
OSV
OSV
added 2024/05/29 4:25 a.m.7 views

USN-6779-2 firefox regressions

USN-6779-1 fixed vulnerabilities in Firefox. The update introduced several minor regressions. This update fixes the problem. Original advisory details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potential...

6.1AI score
Exploits0References2
RedHat Linux
RedHat Linux
added 2024/05/23 12:9 p.m.5 views

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

8.8CVSS7.5AI score0.72648EPSS
Exploits15References6
OSV
OSV
added 2024/05/21 5:46 a.m.6 views

USN-6779-1 firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information across domains, or execute arbitrary code. CVE-2024-4767, CVE-2024-4768,...

9.8CVSS7.2AI score0.72648EPSS
Exploits23References15
RedHat Linux
RedHat Linux
added 2024/05/20 7:56 a.m.5 views

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

8.8CVSS7.5AI score0.72648EPSS
Exploits15References6
RedHat Linux
RedHat Linux
added 2024/05/20 6:1 a.m.4 views

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

8.8CVSS7.5AI score0.72648EPSS
Exploits15References6
RedHat Linux
RedHat Linux
added 2024/05/20 2:11 a.m.4 views

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

8.8CVSS7.5AI score0.72648EPSS
Exploits15References6
RedHat Linux
RedHat Linux
added 2024/05/20 1:41 a.m.3 views

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

8.8CVSS7.5AI score0.72648EPSS
Exploits15References6
RedHat Linux
RedHat Linux
added 2024/05/16 4:52 p.m.6 views

Mozilla: Arbitrary JavaScript execution in PDF.js

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...

8.8CVSS7.5AI score0.72648EPSS
Exploits15References6
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.6 views

Apple CoreGraphics Buffer Error Vulnerability

Apple CoreGraphics is a core component from Apple Inc. that is used in mobile devices for graphics drawing. Apple CoreGraphics suffers from a buffer error vulnerability that stems from a boundary error when handling fonts in the CoreGraphics component in macOS. A remote attacker could create a...

7.8CVSS7.7AI score0.0107EPSS
Exploits0References9
OSV
OSV
added 2021/01/06 3:35 a.m.3 views

USN-4681-1 linux, linux-aws, linux-kvm, linux-lts-xenial, linux-raspi2, linux-snapdragon vulnerabilities

Ryan Hall discovered that the Intel 700 Series Ethernet Controllers driver in the Linux kernel did not properly deallocate memory in some conditions. A local attacker could use this to cause a denial of service kernel memory exhaustion. CVE-2019-0148 It was discovered that the console keyboard...

7CVSS6.7AI score0.01026EPSS
Exploits3References7
BDU FSTEC
BDU FSTEC
added 2020/07/24 12:0 a.m.5 views

The vulnerability of the Windows operating system’s font library allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system’s font library relates to the improper handling of embedded fonts. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted font file from a remote location...

9CVSS7.2AI score0.05662EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2020/01/29 12:0 a.m.4 views

The vulnerability of the Windows operating system’s font library, allowing a hacker to execute arbitrary code

The vulnerability of the Windows operating system’s font library is related to the improper handling of embedded fonts. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.4CVSS7.6AI score0.16568EPSS
Exploits0References4
Kaspersky
Kaspersky
added 2015/12/08 12:0 a.m.86 views

KLA10718 Code execution vulnerabilities in Microsoft Graphics Component

Improper fonts handling was found in Microsoft Graphics Component used in Multiple Microsoft products. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed content. Original advisories CVE-2015-6108...

9.3CVSS7.3AI score0.25998EPSS
Exploits0References38
OpenVAS
OpenVAS
added 2015/05/14 12:0 a.m.31 views

Microsoft Lync Remote Code Execution Vulnerability (3057110)

This host is missing a critical security update according to Microsoft Bulletin MS15-044. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

9.3CVSS5AI score0.54628EPSS
Exploits0References5
Rows per page
Query Builder