USN-6563-1: Thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, obtain sensitive information, bypass security restrictions, cross-site tracing,...

Mozilla: Heap buffer overflow in <code>nsTextFragment</code>

The Mozilla Foundation Security Advisory describes this flaw as: Firefox was susceptible to a heap buffer overflow in nsTextFragment due to insufficient OOM handling...

Use After Free

chromium is vulnerable to Use after free. The vulnerability is due to improper memory management in FedCM in Google Chrome. This allows a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page...

Use After Free

Chromium is vulnerable to Use After Free. The vulnerability is due to improper memory management in CSS component of Google Chrome. This allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...

USN-6557-1 vim vulnerabilities

It was discovered that Vim could be made to dereference invalid memory. An attacker could possibly use this issue to cause a denial of service. This issue only affected Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, and Ubuntu 22.04 LTS. CVE-2022-1725 It was discovered that Vim could be made to recurse...

SUSE-SU-2023:4730-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP5 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2023-6176: Fixed a denial of service in the cryptographic algorithm scatterwalk functionality bsc1217332. - CVE-2023-2006: Fixed a race condition in the RxRP...

PT-2023-9305 · Espeak-Ng +6 · Espeak-Ng +6

Name of the Vulnerable Software and Affected Versions: Espeak-ng version 1.52-dev Description: The issue is related to a Floating Point Exception via the function PeaksToHarmspect at wavegen.c. This can potentially allow an attacker to cause a denial of service or execute arbitrary code due to...

PT-2023-9302 · Espeak-Ng +6 · Espeak-Ng +6

Name of the Vulnerable Software and Affected Versions: Espeak-ng version 1.52-dev Description: The issue is related to a Stack Buffer Underflow via the CountVowelPosition function at synthdata.c. This could allow an attacker to cause a denial of service or potentially execute arbitrary code. The...

PT-2023-9303 · Espeak-Ng +6 · Espeak-Ng +6

Name of the Vulnerable Software and Affected Versions: Espeak-ng version 1.52-dev Description: The issue is related to a Stack Buffer Overflow via the RemoveEnding function at dictionary.c. This can potentially allow an attacker to cause a denial of service or execute arbitrary code. The...

About the security content of macOS Ventura 13.6.3

About the security content of macOS Ventura 13.6.3 This document describes the security content of macOS Ventura 13.6.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

PT-2023-28629 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.2 macOS versions prior to 13.6.3 macOS versions prior to 14.2 Description: A use-after-free issue was addressed with improved memory management. This issue allows a local attacker to potentially elevate their...

About the security content of macOS Monterey 12.7.2

About the security content of macOS Monterey 12.7.2 This document describes the security content of macOS Monterey 12.7.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

Use After Free

chromium is vulnerable to Use after free.The vulnerability is due to there is no proper memory management in Media Capture feature in Google Chrome. An attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific UI interaction...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability is due to improper memory management in Media Stream in Google Chrome. This allows an attacker to potentially exploit heap corruption via a crafted HTML page...

Use After Free

Chromium is vulnerable to Use After Free. The vulnerability is due to improper memory management in Side Panel Search in Google Chrome. This allows an attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via specific UI interaction...

Use After Free

ghostscript is vulnerable to Use After Free. The vulnerability is due to there is no proper memory management and validation mechanisms in the gdevprnopenprinterseekable function. This results in a dangling pointer, that allows attackers to crash the application and cause a denial of service...

The vulnerability of the Vim text editor lies in the use of memory after it is freed, allowing an attacker to execute arbitrary code.

The vulnerability of the Vim text editor is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 lies in its memory management after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the Font Parser component in PDF viewing and editing programs from Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to the use of memory after it is freed. Exploiting this vulnerability could allow...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve memory management issues after memory is freed, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to execut...

kernel: Race between task migrating pages and another task calling exit_mmap to release those same pages getting invalid opcode BUG in include/linux/swapops.h

A flaw was found in pfnswapentrytopage in memory management subsystem in the Linux Kernel. In this flaw, an attacker with a local user privilege may cause a denial of service problem due to a BUG statement referencing pmdt x...