Lucene search
+L

8547 matches found

Github Security Blog
Github Security Blog
added 2022/11/25 3:30 a.m.39 views

Heap buffer overflow in GPU

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS8.8AI score0.31864EPSS
SaveExploits1References7Affected Software1
NVD
NVD
added 2022/11/25 1:15 a.m.24 views

CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS0.31864EPSS
SaveExploits1References4
OSV
OSV
added 2022/11/25 1:15 a.m.2 views

DEBIAN-CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS9.1AI score0.31864EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/25 1:15 a.m.33 views

CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS6.5AI score
SaveExploits0References4
OSV
OSV
added 2022/11/25 1:15 a.m.5 views

UBUNTU-CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS7.7AI score0.31864EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2022/11/25 1:15 a.m.53 views

CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS7.6AI score0.31864EPSS
SaveExploits1References4
Prion
Prion
added 2022/11/25 1:15 a.m.35 views

Heap overflow

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

6.8CVSS9.3AI score0.31864EPSS
SaveExploits1References3Affected Software3
ATTACKERKB
ATTACKERKB
added 2022/11/25 12:00 a.m.50 views

CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High Recent assessments: Assessed Attacker Value: 0 Assessed Attacke...

9.6CVSS2.6AI score0.31864EPSS
SaveIn wildExploits1References4
Cvelist
Cvelist
added 2022/11/25 12:00 a.m.40 views

CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.4AI score0.31864EPSS
SaveExploits1References3
CNVD
CNVD
added 2022/11/25 12:00 a.m.63 views

ARM Mali GPU Driver Competitive Conditions Vulnerability

ARM Mali GPU Driver is an email driver from ARM UK. A competitive condition vulnerability exists in ARM Mali GPU Driver version 2022-06-29 and earlier, which stems from TOCTOU having a competitive condition that allows an unprivileged user to perform an incorrect GPU processing operation to acces...

7.5CVSS7.4AI score0.00539EPSS
SaveExploits0References1
CVE
CVE
added 2022/11/25 12:00 a.m.1280 views

CVE-2022-4135

CVE-2022-4135 affects Google Chrome/Chromium GPU code. It is a heap buffer overflow in the GPU path prior to Chrome 107.0.5304.121 that could allow a remote attacker (with renderer access) to escape the sandbox via a crafted HTML page. Chrome confirms exploitation in the wild; a stable-channel pa...

9.6CVSS9.3AI score0.31864EPSS
SaveIn wildExploits1References4Affected Software1
Debian CVE
Debian CVE
added 2022/11/25 12:00 a.m.45 views

CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: High...

9.6CVSS9.8AI score0.31864EPSS
SaveExploits1
The Hacker News
The Hacker News
added 2022/11/24 11:17 a.m.56 views

Millions of Android Devices Still Don't Have Patches for Mali GPU Flaws

A set of five medium-severity security flaws in Arm's Mali GPU driver has continued to remain unpatched on Android devices for months, despite fixes released by the chipmaker. Google Project Zero, which discovered and reported the bugs, said Arm addressed the shortcomings in July and August 2022...

6.5CVSS0.3AI score0.00961EPSS
SaveExploits1
FreeBSD
FreeBSD
added 2022/11/24 12:00 a.m.46 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 1 security fix: 1392715 High CVE-2022-4135: Heap buffer overflow in GPU. Reported by Clement Lecigne of Google's Threat Analysis Group on 2022-11-22 Google is aware that an exploit for CVE-2022-4135 exists in the wild...

9.6CVSS1.2AI score0.31864EPSS
SaveExploits1References1
NVD
NVD
added 2022/11/23 3:15 a.m.28 views

CVE-2022-34830

An Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged user to make improper GPU processing operations to gain access to already freed memory...

7.5CVSS0.00539EPSS
SaveExploits0References2
OSV
OSV
added 2022/11/23 3:15 a.m.7 views

CVE-2022-34830

An Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged user to make improper GPU processing operations to gain access to already freed memory...

7.5CVSS5.8AI score0.00539EPSS
SaveExploits0References2
Prion
Prion
added 2022/11/23 3:15 a.m.19 views

Race condition

An Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged user to make improper GPU processing operations to gain access to already freed memory...

4.6CVSS7.6AI score0.00539EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2022/11/23 12:00 a.m.117 views

CVE-2022-34830

CVE-2022-34830 affects Arm Mali GPU Driver (Arm product family through 2022-06-29). The issue is a TOCTOU race condition that can allow a non-privileged user to trigger improper GPU processing and gain access to memory that has already been freed. The provided documents consistently describe the ...

7.5CVSS7.6AI score0.00539EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2022/11/23 12:00 a.m.10 views

ARM Mali GPU Driver 安全漏洞

ARM Mali GPU Driver is an email driver from ARM UK. A competitive condition vulnerability exists in ARM Mali GPU Driver version 2022-06-29 and earlier, which stems from TOCTOU having a competitive condition that allows an unprivileged user to perform an incorrect GPU processing operation to acces...

7.5CVSS6.7AI score0.00539EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2022/11/23 12:00 a.m.7 views

CVE-2022-34830

An Arm product family through 2022-06-29 has a TOCTOU Race Condition that allows non-privileged user to make improper GPU processing operations to gain access to already freed memory...

7.7AI score0.00539EPSS
SaveExploits0References2
Rows per page
Query Builder