UBUNTU-CVE-2019-5807

Object lifetime issue in V8 in Google Chrome prior to 74.0.3729.108 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Debian: Security Advisory (DLA-1829-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 1829-1] firefox-esr security update

Package : firefox-esr Version : 60.7.1esr-1deb8u1 CVE ID : CVE-2019-11707 Samuel Gross discovered a type confusion bug in the JavaScript engine of the Mozilla Firefox web browser, which could result in the execution of arbitrary code when browsing a malicious website. For Debian 8 "Jessie", this...

Debian: Security Advisory (DSA-4466-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2019-2609

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. It could allow a remote attacker to execute arbitrary code using a specially crafted w...

PT-2019-2611

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. It could allow a remote attacker to execute arbitrary code using a specially crafted w...

PT-2019-2493

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. It could allow a remote attacker to execute arbitrary code using a specially crafted w...

PT-2019-2598

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrary code...

PT-2019-2599

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrary code...

PT-2019-2619

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrary code...

Google Chrome V8 Security Bypass Vulnerability

Google Chrome is a web browser of Google Google, U.S. V8 is one of the open source JavaScript engine. A security vulnerability exists in V8 in versions of Google Chrome prior to 75.0.3770.80. An attacker can exploit this vulnerability to bypass security restrictions and gain unauthorized access t...

Spidermonkey - IonMonkey Leaks JS_OPTIMIZED_OUT Magic Value to Script

IonMonkey can, during a bailout, leak an internal JSOPTIMIZEDOUT magic value to the running script. This magic value can then be used to achieve memory corruption. Prerequisites Magic Values Spidermonkey represents JavaScript values with the C++ type JS::Value 1, which is a NaN-boxed value that c...

Chinese Spy Group Mixes Up Its Malware Arsenal with Brand-New Loaders

The Chinese-language cyber-espionage group known as APT10 has apparently added to its malware bag of tricks, with two never-before-seen malware loader variants used in April campaigns against government and private organizations in Southeast Asia. Also, the campaigns featured modified versions of...

CVE-2019-9821

A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. This vulnerability affects Firefox 67...

CVE-2019-9814

Mozilla developers and community members reported memory safety bugs present in Firefox 66. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox 67...

PT-2019-2174

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code in the context of the...

PT-2019-2163

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining the...

PT-2019-2161

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining the...

PT-2019-2169

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrary code...

PT-2019-2173

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue is related to errors in handling objects in memory by the ChakraCore JavaScript engine handler in Microsoft Edge. This could allow a remote attacker to execute arbitrary code...