Lucene search
K

12 matches found

Positive Technologies
Positive Technologies
added 5 days ago7 views

PT-2026-46765

Inappropriate implementation in DevTools in Google Chrome prior to 149.0.7827.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Low...

5.8AI score0.00015EPSS
Exploits0References3
NVD
NVD
added 2025/11/10 8:15 p.m.2 views

CVE-2025-12436

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Medium...

5.9CVSS0.00018EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/11/10 8:0 p.m.1 views

CVE-2025-12436

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension. Chromium security severity: Medium...

5.3AI score0.00018EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2024/09/17 12:0 a.m.0 views

The vulnerability of Adobe Audition’s audio editor, related to reading data beyond the buffer in memory, allows a hacker to gain access to confidential information.

The vulnerability of Adobe Audition relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to access confidential information...

5.5CVSS5.7AI score0.00033EPSS
Exploits0References2Affected Software1
NCSC
NCSC
added 2021/08/26 12:0 a.m.2 views

Vulnerabilities fixed in Xen

Xen's developers have fixed several vulnerabilities in Xen. A local malicious person could exploit the vulnerabilities to cause a denial-of-service, both in the guest system as well as the underlying host. Also, potentially the vulnerabilities could be exploited to obtain sensitive data in memory...

7.8CVSS6.6AI score0.02126EPSS
Exploits0
OSV
OSV
added 2020/05/21 4:15 a.m.0 views

UBUNTU-CVE-2020-6472

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory or disk via a crafted Chrome Extension...

6.5CVSS7.2AI score0.00889EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2018/04/23 12:36 p.m.3 views

chromium-browser: Confusing autofill settings

Confusing settings in Autofill in Google Chrome prior to 66.0.3359.117 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.5CVSS7.4AI score0.00936EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2017/04/06 12:0 a.m.3 views

The vulnerability of the Internet Explorer browser allows a perpetrator to obtain confidential information from the process’s memory, cause a service failure, or have other effects on the system.

The vulnerability of the Internet Explorer browser is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from the process memory, cause service failures, or otherwise affect the syst...

4.3CVSS6.5AI score0.11395EPSS
Exploits5References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/03/23 12:0 a.m.2 views

The vulnerability of the Windows operating system allows a perpetrator to obtain confidential information from the process memory.

The vulnerability of the Uniscribe component of the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor, acting remotely, to obtain confidential information from the process’s memory through a specially crafted web...

4.3CVSS5.8AI score0.09704EPSS
Exploits2References3
BDU FSTEC
BDU FSTEC
added 2017/03/09 12:0 a.m.1 views

The vulnerability of the iOS operating system, the multimedia player iTunes, and the web browser Safari allows a perpetrator to obtain confidential information from the process’s memory.

The vulnerability of the WebKit component of the iOS operating system, the multimedia player iTunes, and the browser Safari is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information from...

4.3CVSS7AI score0.00569EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2016/07/05 12:0 a.m.1 views

The vulnerability of the Mozilla SeaMonkey software package allows a malicious individual to execute arbitrary code, gain access to confidential information, or cause a service failure.

Mozilla SeaMonkey software contains a vulnerability related to errors in the implementation of the Mozilla::WaveReader::DecodeAudioData function. Exploiting this vulnerability allows malicious actors to gain access to confidential information from the dynamic memory of the process, trigger servic...

6.8CVSS7AI score0.00502EPSS
Exploits2References5
myhack58
myhack58
added 2005/10/23 12:0 a.m.20 views

How to in Windows 2 0 0 3 to give the login password-vulnerability warning-the black bar safety net

In all NT systems, there are several ways you can get the login user's password. I know of three methods can achieve the purpose. 1. hook the winlogon in the several function, the Internet also has this type ofprogram, called winlogonhijack items in the rootkit. com has to offer, but that project...

7AI score
Exploits0
Rows per page
Query Builder