CVE-2022-1487

Use after free in Ozone in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via running a Wayland test...

CVE-2022-1487

CVE-2022-1487 describes a use-after-free in Ozone within Google Chrome/Chromium, allowing potential remote heap corruption when running a Wayland test. Affected product/portion: Ozone in Chrome/Chromium prior to version 101.0.4951.41. Root cause: use-after-free vulnerability in Ozone components. ...

CVE-2022-1487

Use after free in Ozone in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via running a Wayland test...

MAL-2022-5167 Malicious code in ozone-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48bc3a89d6b2b7c5eb33d55c99bb911e64837ebff5fd4b76abdf1e966ae1e216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ozone-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48bc3a89d6b2b7c5eb33d55c99bb911e64837ebff5fd4b76abdf1e966ae1e216 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ozone-material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24d9f8455c451027dce1ea1e7907088eae2aaa61fd8d8a450d34fa7b3e1d7083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ozone-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f6735a42b44af8f34dd1492af31a5132908fc06b3d6bd08d5eb28e11823e8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5170 Malicious code in ozone-material (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 24d9f8455c451027dce1ea1e7907088eae2aaa61fd8d8a450d34fa7b3e1d7083 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ozone-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61273f0e3e25cf967a6986776763dba552b707f820eb9e7c57d7cc02b5b6af39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5168 Malicious code in ozone-helper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f6735a42b44af8f34dd1492af31a5132908fc06b3d6bd08d5eb28e11823e8da Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5169 Malicious code in ozone-logic (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 61273f0e3e25cf967a6986776763dba552b707f820eb9e7c57d7cc02b5b6af39 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the Ozone component in Microsoft Edge and Google Chrome browsers allows attackers to disclose protected information.

The vulnerability of the Ozone component in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to disclose sensitive information...

Mageia: Security Advisory (MGASA-2022-0158)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Chromium: CVE-2022-1487 Use after free in Ozone

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA12519 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 30 security fixes, including: 1313905 High CVE-2022-1477: Use after free in Vulkan. Reported by SeongHwan Park SeHwa on 2022-04-06 1299261 High CVE-2022-1478: Use after free in SwiftShader. Reported by SeongHwan Park SeHwa on 2022-02-20 1305190 High...

KLA12517 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Input can...

Apache Ozone has unspecified vulnerabilities

Apache Ozone is an application. A scalable, redundant and distributed object store for Hadoop and cloud-native environments. a security vulnerability in Apache Ozone version 1.2.0, which stems from the fact that certain administrator-related SCM commands can be executed by any authenticated user...

Apache Ozone input validation error vulnerability

Apache Ozone is an application. A scalable, redundant and distributed object store for Hadoop and cloud-native environments, an input validation error vulnerability exists in Apache Ozone, which stems from the product's Ozone Datanode not checking the block token's access mode parameter. An...

Apache Ozone Access Control Error Vulnerability (CNVD-2021-91628)

Apache Ozone is an application. An accessible control error vulnerability exists in Apache Ozone, which stems from the product's failure to add valid permission checks for users. An attacker could bypass ACL checks to access sensitive information through this vulnerability...