Lucene search
+L

107 matches found

CISA KEV Catalog
CISA KEV Catalog
•added 2022/10/24 12:00 a.m.•79 views

GIGABYTE Multiple Products Privilege Escalation Vulnerability

The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges...

9.8CVSS7.3AI score0.08364EPSS
SaveIn wildExploits3
CISA KEV Catalog
CISA KEV Catalog
•added 2022/10/24 12:00 a.m.•102 views

GIGABYTE Multiple Products Privilege Escalation Vulnerability

The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges...

7.8CVSS3.9AI score0.03701EPSS
SaveIn wildExploits2
VulnCheck KEV
VulnCheck KEV
•added 2022/10/24 12:00 a.m.•11 views

VulnCheck KEV: CVE-2018-19321

The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate privileges...

7.8CVSS7.3AI score0.03701EPSS
SaveIn wildExploits2References4
CISA KEV Catalog
CISA KEV Catalog
•added 2022/10/24 12:00 a.m.•90 views

GIGABYTE Multiple Products Code Execution Vulnerability

The GPCIDrv and GDrv low-level drivers in GIGABYTE App Center, AORUS Graphics Engine, XTREME Gaming Engine, and OC GURU II expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run code with elevated privileges...

7.8CVSS4.4AI score0.01816EPSS
SaveIn wildExploits2
OSV
OSV
•added 2022/07/22 5:15 p.m.•6 views

DEBIAN-CVE-2022-0978

Use after free in ANGLE in Google Chrome prior to 99.0.4844.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.00901EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2022/06/09 12:00 a.m.•20 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. A resource management error vulnerability exists in Google Chrome versions 90.0.4430.72 through 102.0.5005.63, which stems from a post-release reuse error in the ANGLE component. A remote attacker could...

8.8CVSS8.2AI score0.01075EPSS
SaveExploits0References12
attackerkb
attackerkb
•added 2022/04/05 1:15 a.m.•16 views

CVE-2022-0792

Out of bounds read in ANGLE in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.5CVSS7.9AI score0.00995EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2022/04/05 1:15 a.m.•12 views

CVE-2022-0454

Heap buffer overflow in ANGLE in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.3AI score0.00904EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/03/02 12:00 a.m.•22 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, Inc. Google Chrome suffers from a read out-of-bounds vulnerability, which stems from a read out-of-bounds issue in ANGLE and can be exploited by attackers to potentially execute arbitrary code...

6.5CVSS8AI score0.00995EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2021/12/13 12:00 a.m.•15 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from an object lifecycle issue in ANGLE. An attacker could use this vulnerability to bypass security restrictions...

8.8CVSS7.9AI score0.0075EPSS
SaveExploits0References10
CNNVD
CNNVD
•added 2021/08/12 12:00 a.m.•16 views

Qt QLibrary 缓冲区错误漏洞

Qt QLibrary is a code framework and QLibrary is one of his libraries. A buffer error vulnerability exists in Qt QLibrary that stems from an out-of-bounds write in QOutlineMapper::convertPath called from QRasterPaintEngine::fill and QPaintEngineEx::stroke...

7.5CVSS7AI score0.03002EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
•added 2020/11/12 12:00 a.m.•12 views

The vulnerability of the ANGLE graphics engine in the Google Chrome browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the ANGLE graphics engine in the Google Chrome browser is related to the storage beyond the buffer memory boundaries. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

7.3CVSS7.9AI score0.01673EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
•added 2020/04/23 12:00 a.m.•30 views

The vulnerability of the ANGEL graphics engine in Google Chrome browsers, related to the execution of operations beyond buffer boundaries in memory, allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ANGEL graphics engine in Google Chrome browsers is related to a buffer overflow error in dynamic memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service interruptions...

9.3CVSS7.4AI score0.01851EPSS
SaveExploits0References6Affected Software4
Positive Technologies
Positive Technologies
•added 2019/04/23 12:00 a.m.•4 views

PT-2019-5074

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 74.0.3729.108 Description The issue is related to a heap buffer overflow in the ANGLE graphics engine of Google Chrome, which could be exploited by a remote attacker using a crafted HTML page. This exploitation...

9.3CVSS0.01851EPSS
SaveExploits0
CNVD
CNVD
•added 2018/12/25 12:00 a.m.•35 views

Arbitrary Code Execution Vulnerability in Multiple GIGABYTE Products (CNVD-2018-26460)

GIGABYTE APP Center and others are products of GIGABYTE Technology, a Chinese company. GIGABYTE APP Center is a software program for managing and updating GIGABYTE's product utility programs. AORUS GRAPHICS ENGINE is a software program for overclocking graphics cards. A security vulnerability...

7.8CVSS6.6AI score0.03701EPSS
SaveExploits2References1
CNVD
CNVD
•added 2018/12/25 12:00 a.m.•19 views

Arbitrary Code Execution Vulnerability in Multiple GIGABYTE Products (CNVD-2018-26458)

GIGABYTE APP Center and others are products of GIGABYTE Technology, a Chinese company. GIGABYTE APP Center is a software program for managing and updating GIGABYTE's product utility programs. AORUS GRAPHICS ENGINE is a software program for overclocking graphics cards. An arbitrary code execution...

7.8CVSS8.2AI score0.01816EPSS
SaveExploits2References1
CNVD
CNVD
•added 2018/12/25 12:00 a.m.•29 views

Arbitrary Code Execution Vulnerability in Multiple GIGABYTE Products (CNVD-2018-26457)

GIGABYTE APP Center and others are products of GIGABYTE Technology, a Chinese company. GIGABYTE APP Center is a software program for managing and updating GIGABYTE's product utility programs. AORUS GRAPHICS ENGINE is a software program for overclocking graphics cards. A security vulnerability...

7.8CVSS7.2AI score0.03597EPSS
SaveExploits4References1
OSV
OSV
•added 2018/12/21 11:29 p.m.•12 views

CVE-2018-19321

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate...

7.8CVSS5.9AI score0.03701EPSS
SaveExploits2References5
Prion
Prion
•added 2018/12/21 11:29 p.m.•36 views

Code injection

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read and write arbitrary physical memory. This could be leveraged by a local attacker to elevate...

7.2CVSS7.2AI score0.03701EPSS
SaveExploits2References4Affected Software4
NVD
NVD
•added 2018/12/21 11:29 p.m.•35 views

CVE-2018-19322

The GPCIDrv and GDrv low-level drivers in GIGABYTE APP Center v1.05.21 and earlier, AORUS GRAPHICS ENGINE before 1.57, XTREME GAMING ENGINE before 1.26, and OC GURU II v2.08 expose functionality to read/write data from/to IO ports. This could be leveraged in a number of ways to ultimately run cod...

7.8CVSS7.6AI score0.01816EPSS
SaveExploits2References6
Rows per page
Query Builder