5540 matches found
quickjs:fuzz_compile: Use-of-uninitialized-value in build_backtrace
Project: https://github.com/horhof/quickjs.git https://github.com/bellard/quickjs.git Detailed Report: https://oss-fuzz.com/testcase?key=6033744751886336 Project: quickjs Fuzzing Engine: libFuzzer Fuzz Target: fuzzcompile Job Type: libfuzzermsanquickjs Platform Id: linux Crash Type:...
Google Releases Urgent Chrome Update to Patch Actively Exploited Zero-Day Flaw
Google on Thursday shipped emergency patches to address two security issues in its Chrome web browser, one of which it says is being actively exploited in the wild. Tracked as CVE-2022-1364, the tech giant described the high-severity bug as a case of type confusion in the V8 JavaScript engine...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to gain unauthorized access to protected information.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type conversion errors. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc.V8 is an open source JavaScript engine. Google Chrome suffers from a resource management error vulnerability that stems from the presence of post-release reuse in software storage...
Google Chrome 安全特征问题漏洞
Google Chrome is a web browser from Google Inc. of the U.S. V8 is one of the open source JavaScript engines. Google Chrome suffers from a security feature issue vulnerability that stems from improper implementation in synthesis...
Google Chrome 资源管理错误漏洞
Google Chrome is a web browser from Google, Inc.V8 is an open source JavaScript engine. Google Chrome suffers from a resource management error vulnerability that stems from the presence of post-release reuse in BFCache...
Google Chrome 安全特征问题漏洞
Google Chrome is a web browser from Google, Inc.V8 is an open source JavaScript engine. Google Chrome suffers from a security signature issue vulnerability that stems from improper full-screen execution of the software...
CVE-2022-28289
Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs present in Thunderbird 91.7. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have...
CVE-2022-0470
Out of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CVE-2022-0457
Type confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2022-0457
Type confusion in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2022-0470
Out of bounds memory access in V8 in Google Chrome prior to 98.0.4758.80 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.
The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine exists due to a mix of data types. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. A security vulnerability exists in Google Chrome V8 prior to version 100.0.4896.75, which stems from a type confusion issue. A remote attacker can exploit this vulnerability to potentially cause heap...
Security advisory: Recently reported Chromium "Type confusion" issue impacts Qt WebEngine
Google has recently reported that Chromium has a security issue - Type confusion in the V8 JavaScript engine - which is reported in a bit more detail here: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop25.html. This has been assigned the CVE id CVE-2022-1096. This...
Google Chrome安全漏洞
Google Chrome is a web browser from Google, Inc.V8 is an open source JavaScript engine. A security vulnerability exists in Google Chrome due to a type obfuscation error in the V8 component of Google Chrome. A remote attacker can create a specially crafted web page and trick a victim into visiting...
Cesanta MJS has an unspecified vulnerability (CNVD-2022-77026)
Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are small footprint and simple C/C interoperability.Cesanta MJS has a security vulnerability that could be exploited by an attacker to cause...
PT-2022-2721
Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description The issue is related to a "zero-day" vulnerability in the V8 JavaScript engine handler of Google Chrome, which is associated with the use of memory after it has been freed. This could...