Lucene search
K

1683 matches found

RedHat Linux
RedHat Linux
added 2021/12/08 10:2 a.m.2 views

Mozilla: GC rooting failure when calling wasm instance methods

The Mozilla Foundation Security Advisory describes this flaw as: Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitab...

8.8CVSS7.3AI score0.0162EPSS
Exploits0References4
OSV
OSV
added 2021/12/08 12:0 a.m.4 views

UBUNTU-CVE-2021-43539

Failure to correctly record the location of live pointers across wasm instance calls resulted in a GC occurring within the call not tracing those live pointers. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Thunderbird 91.4.0, Firefox...

8.8CVSS7.3AI score0.0162EPSS
Exploits0References8
NVD
NVD
added 2021/11/23 10:15 p.m.19 views

CVE-2021-37998

Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.00942EPSS
Exploits0References4
OSV
OSV
added 2021/11/23 10:15 p.m.2 views

DEBIAN-CVE-2021-37998

Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.00942EPSS
Exploits0References1
Prion
Prion
added 2021/11/23 10:15 p.m.25 views

Design/Logic Flaw

Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS9AI score0.00942EPSS
Exploits0References4Affected Software3
Cvelist
Cvelist
added 2021/11/23 9:30 p.m.16 views

CVE-2021-37998

Use after free in Garbage Collection in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

9.3AI score0.00942EPSS
Exploits0References4
CVE
CVE
added 2021/11/23 9:30 p.m.138 views

CVE-2021-37998

CVE-2021-37998 is a use-after-free vulnerability in the Garbage Collection component of the Chromium browser engine (Chrome) prior to 95.0.4638.69. The issue could allow a remote attacker to cause heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Public recor...

8.8CVSS9AI score0.00942EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:0 a.m.3 views

The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...

10CVSS7.8AI score0.00861EPSS
Exploits0References10Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/11/17 12:0 a.m.2 views

The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Garbage Collection component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a specially created web page...

10CVSS8.1AI score0.00942EPSS
Exploits0References10Affected Software6
OpenVAS
OpenVAS
added 2021/11/11 12:0 a.m.21 views

Mozilla Firefox Security Advisory (MFSA2014-30) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

10CVSS9.6AI score0.31373EPSS
Exploits1References3
OpenVAS
OpenVAS
added 2021/11/11 12:0 a.m.14 views

Mozilla Firefox Security Advisory (MFSA2013-08) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

9.3CVSS6.4AI score0.04485EPSS
Exploits0References3
Veracode
Veracode
added 2021/11/09 3:11 p.m.21 views

Remote Code Execution (RCE)

chrome is vulnerable to remote code execution. The vulnerability exists due to a use-after-free error within the Garbage Collection component in Google Chrome...

8.8CVSS3.7AI score0.00942EPSS
Exploits0References6Affected Software2
OpenVAS
OpenVAS
added 2021/11/08 12:0 a.m.19 views

Mozilla Firefox Security Advisory (MFSA2016-71) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

8.8CVSS9.3AI score0.02412EPSS
Exploits0References3
OSV
OSV
added 2021/11/02 9:15 p.m.1 views

DEBIAN-CVE-2021-37977

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.1AI score0.00861EPSS
Exploits0References1
NVD
NVD
added 2021/11/02 9:15 p.m.17 views

CVE-2021-37977

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.00861EPSS
Exploits0References4
UbuntuCve
UbuntuCve
added 2021/11/02 9:15 p.m.73 views

CVE-2021-37977

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00861EPSS
Exploits0References1
Prion
Prion
added 2021/11/02 9:15 p.m.26 views

Design/Logic Flaw

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.8AI score0.00861EPSS
Exploits0References4Affected Software3
Debian CVE
Debian CVE
added 2021/11/02 8:25 p.m.52 views

CVE-2021-37977

Use after free in Garbage Collection in Google Chrome prior to 94.0.4606.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.00861EPSS
Exploits0
Microsoft CVE
Microsoft CVE
added 2021/10/29 4:52 p.m.58 views

Chromium: CVE-2021-37998 Use after free in Garbage Collection

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.00942EPSS
Exploits0
CNVD
CNVD
added 2021/10/29 12:0 a.m.38 views

Google Chrome Post-release Reuse Vulnerability (CNVD-2021-99263)

A post-release reuse vulnerability exists in Google Chrome 95.0.4638.69 and earlier versions of "garbage collection". An attacker could exploit this vulnerability to cause heap corruption via a crafted HTML page...

8.8CVSS3.1AI score0.00942EPSS
Exploits0References1
Rows per page
Query Builder