15 matches found
CVE-2026-12284
Mattermost Desktop App versions =6.2 6.2.2.0 fails to validate the IPC sender in the leaveCall handler which allows a malicious or compromised Mattermost server or a user with script access to a connected server view to disconnect an active call belonging to a different connected server via the...
EUVD-2026-81680
Mattermost Desktop App versions =6.2 6.2.2.0 fails to validate the IPC sender in the leaveCall handler which allows a malicious or compromised Mattermost server or a user with script access to a connected server view to disconnect an active call belonging to a different connected server via the...
CVE-2026-2796-and-CVE-2026-2768-escape-the-wasm-box
CVE-2026-2796 + CVE-2026-2768 — 逃出 Wasm 沙箱 全链路 Firefox 漏洞利用研究:利用一个 WebAssembly 类型混淆实现渲染器代码执行 ,并串联到父进程漏洞以实现沙箱逃逸 。两个漏洞均在 Firefox 148 (MFSA-2026-13)中修复;这里的目标是 2fbc0748c4(2026-01-14)的 Firefox 148-nightly 代码树,早于这两个修复。 CVE-2026-2796 (Bug 2013165):SpiderMonkey WebAssembly 导入优化中的 JIT 错误编译/签名类型混淆。...
PT-2026-36337
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the ipc validate msg function within the ksmbd module. The function calculates the expected message size for response types by performing unsigned integer...
CVE-2024-8272 macOS Universal Audio (UAConnect) <= 2.7.0 - Local Privilege Escalation
The com.uaudio.bsd.helper service, responsible for handling privileged operations, fails to implement critical client validation during XPC inter-process communication IPC. Specifically, the service does not verify the code requirements, entitlements, or security flags of any client attempting to...
Security Bulletin: Multiple Mozilla Firefox vulnerabilities in IBM SONAS
Summary There are security vulnerabilities in versions of Mozilla Firefox that are shipped with versions 1.5.1.0 to 1.5.2.10 of IBM SONAS Vulnerability Details IBM SONAS is shipped with Mozilla Firefox. There are vulnerabilities in certain versions of Mozilla Firefox shipped in certain versions o...
UBUNTU-CVE-2016-7549
Google Chrome before 53.0.2785.113 does not ensure that the recipient of a certain IPC message is a valid RenderFrame or RenderWidget, which allows remote attackers to cause a denial of service invalid pointer dereference and application crash or possibly have unspecified other impact by leveragi...
Google Chrome Multiple Denial of Service Vulnerabilities - May 12 (Mac OS X)
The host is installed with Google Chrome and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnmay12macosx.nasl 5940 2017-04-12 09:02:05Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - May 12 Mac OS X Authors:...
Google Chrome Multiple Denial of Service Vulnerabilities (May 2012) - Windows
Google Chrome is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome Multiple Denial of Service Vulnerabilities (May 2012) - Mac OS X
Google Chrome is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Google Chrome Multiple Denial of Service Vulnerabilities - May 12 (Linux)
The host is installed with Google Chrome and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnmay12lin.nasl 5931 2017-04-11 09:02:04Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - May 12 Linux Authors: Rachana...
Google Chrome Multiple Denial of Service Vulnerabilities - May 12 (Windows)
The host is installed with Google Chrome and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultdosvulnmay12win.nasl 5912 2017-04-10 09:01:51Z teissa $ Google Chrome Multiple Denial of Service Vulnerabilities - May 12 Windows Authors: Rachana...
FreeBSD : chromium -- multiple vulnerabilities (94c0ac4f-9388-11e1-b242-00262d5ed8ee)
Google Chrome Releases reports : 106413 High CVE-2011-3078: Use after free in floats handling. Credit to Google Chrome Security Team Marty Barbella and independent later discovery by miaubiz. 117627 Medium CVE-2011-3079: IPC validation failure. Credit to PinkiePie. 121726 Medium CVE-2011-3080: Ra...
Google Chrome < 18.0.1025.168 Multiple Vulnerabilities
The version of Google Chrome installed on the remote host is earlier than 18.0.1025.168 and is, therefore, affected by the following vulnerabilities : - Use-after-free errors exist related to floating element handling and the xml parser. CVE-2011-3078, CVE-2012-1521, CVE-2011-3081 - A validation...
chromium -- multiple vulnerabilities
Google Chrome Releases reports: 106413 High CVE-2011-3078: Use after free in floats handling. Credit to Google Chrome Security Team Marty Barbella and independent later discovery by miaubiz. 117627 Medium CVE-2011-3079: IPC validation failure. Credit to PinkiePie. 121726 Medium CVE-2011-3080: Rac...