Lucene search
K

4499 matches found

BDU FSTEC
BDU FSTEC
added 2022/12/07 12:0 a.m.3 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.16109EPSS
Exploits2References8Affected Software4
Malwarebytes
Malwarebytes
added 2022/12/05 10:30 p.m.76 views

Update now! Emergency fix for Google Chrome's V8 JavaScript engine zero-day flaw released

On Friday, December 2, Google rolled out an out-of-band patch for an actively exploited zero-day vulnerability in its V8 JavaScript engine. The flaw could allow attackers to cause a system crash or execute potentially malicious code. That means you'll want to update Chrome to patch against this...

0.2AI score0.16109EPSS
Exploits2
Vivaldi Security Advisories
Vivaldi Security Advisories
added 2022/12/03 9:11 a.m.7 views

Minor update (6) for Vivaldi Desktop Browser 5.5

Download Vivaldi The following improvements were made since the fifth 5.5 minor update: Chromium Backported fix: Type Confusion in V8 CVE-2022-4262 Main photo byCamilo Jimenez...

8.8CVSS5.8AI score0.16109EPSS
Exploits2References1
The Hacker News
The Hacker News
added 2022/12/03 4:41 a.m.86 views

Google Rolls Out New Chrome Browser Update to Patch Yet Another Zero-Day Vulnerability

Search giant Google on Friday released an out-of-band security update to fix a new actively exploited zero-day flaw in its Chrome web browser. The high-severity flaw, tracked as CVE-2022-4262, concerns a type confusion bug in the V8 JavaScript engine. Clement Lecigne of Google's Threat Analysis...

9.6CVSS1.8AI score0.70461EPSS
Exploits8
OSV
OSV
added 2022/12/02 9:15 p.m.2 views

DEBIAN-CVE-2022-4262

Type confusion in V8 in Google Chrome prior to 108.0.5359.94 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.6AI score0.16109EPSS
Exploits2References1
hivepro
hivepro
added 2022/12/02 11:27 a.m.35 views

Google addressed an array of bugs with Chrome 108

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Google Chromes latest stable channel update for Windows, Mac, and Linux fixes several vulnerabilities. There are eight high-severity security flaws and 14 medium-severity flaws. The most significa...

8.8AI score0.00881EPSS
Exploits1
OSV
OSV
added 2022/11/30 12:15 a.m.1 views

UBUNTU-CVE-2022-4174

Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.3AI score0.00881EPSS
Exploits1References4
NVD
NVD
added 2022/11/21 4:15 p.m.16 views

CVE-2022-40129

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker...

8.8CVSS0.0098EPSS
Exploits1References1
OSV
OSV
added 2022/11/21 4:15 p.m.4 views

CVE-2022-40129

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker...

7.8CVSS5.8AI score
Exploits0References1
OSV
OSV
added 2022/11/21 4:15 p.m.2 views

CVE-2022-38097

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely destroying annotation objects, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An...

7.8CVSS5.8AI score0.00801EPSS
Exploits0References1
NVD
NVD
added 2022/11/21 4:15 p.m.19 views

CVE-2022-32774

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely deleting objects associated with pages, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

8.8CVSS0.0098EPSS
Exploits1References1
NVD
NVD
added 2022/11/21 4:15 p.m.14 views

CVE-2022-38097

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely destroying annotation objects, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An...

8.8CVSS0.00801EPSS
Exploits0References1
OSV
OSV
added 2022/11/21 4:15 p.m.4 views

CVE-2022-37332

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing media player API, which can lead to arbitrary code execution. An attacker needs to...

7.8CVSS5.8AI score0.0135EPSS
Exploits1References1
Prion
Prion
added 2022/11/21 4:15 p.m.21 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker...

4.4CVSS7.8AI score0.0098EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2022/11/21 4:15 p.m.15 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely destroying annotation objects, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An...

4.4CVSS7.8AI score0.00801EPSS
Exploits0References1Affected Software1
Prion
Prion
added 2022/11/21 4:15 p.m.18 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing media player API, which can lead to arbitrary code execution. An attacker needs to...

4.4CVSS7.7AI score0.0135EPSS
Exploits1References1Affected Software1
Prion
Prion
added 2022/11/21 4:15 p.m.20 views

Design/Logic Flaw

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely deleting objects associated with pages, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution...

4.4CVSS7.9AI score0.0098EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/11/21 4:5 p.m.31 views

CVE-2022-40129

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. A specially-crafted PDF document can trigger the reuse of previously freed memory via misusing Optional Content Group API, which can lead to arbitrary code execution. An attacker...

8.8CVSS7.9AI score0.0098EPSS
Exploits1References1
CVE
CVE
added 2022/11/21 4:5 p.m.94 views

CVE-2022-40129

Affected product: Foxit PDF Reader (v12.0.1.12430). Vulnerability: Use-after-free in the JavaScript engine triggered by crafted PDFs, specifically via Optional Content Group API, leading to arbitrary code execution. Exploitation may require user action or could occur if a malicious site is visite...

8.8CVSS7.6AI score0.0098EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/11/21 4:5 p.m.23 views

CVE-2022-38097

A use-after-free vulnerability exists in the JavaScript engine of Foxit Software's PDF Reader, version 12.0.1.12430. By prematurely destroying annotation objects, a specially-crafted PDF document can trigger the reuse of previously freed memory, which can lead to arbitrary code execution. An...

8.8CVSS7.9AI score0.00801EPSS
Exploits0References1
Rows per page
Query Builder