Lucene search
+L

3453 matches found

Tenable Nessus
Tenable Nessus
•added 2023/11/07 12:00 a.m.•32 views

Fedora 39 : chromium (2023-0b39dc9302)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0b39dc9302 advisory. update to 118.0.5993.117. Security release for CVE-2023-5472 ---- Update to 118.0.5993.88 ---- Update to 118.0.5993.70. Include following security...

8.8CVSS7.4AI score0.01819EPSS
SaveExploits0References17
Tenable Nessus
Tenable Nessus
•added 2023/11/03 12:00 a.m.•112 views

Microsoft Edge (Chromium) < 118.0.2088.88 / 119.0.2151.44 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.88 / 119.0.2151.44. It is, therefore, affected by multiple vulnerabilities as referenced in the November 2, 2023 advisory. - Microsoft Edge Chromium-based Remote Code Execution Vulnerability CVE-2023-36022,...

8.8CVSS7.2AI score0.07154EPSS
SaveExploits0References33
Veracode
Veracode
•added 2023/11/02 6:39 p.m.•34 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the Profiles component of the library which allows an attacker to convince user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures...

8.8CVSS7.2AI score0.01134EPSS
SaveExploits0References10Affected Software1
Microsoft CVE
Microsoft CVE
•added 2023/11/02 7:00 a.m.•55 views

Chromium: CVE-2023-5854 Use after free in Profiles

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.01134EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/11/02 2:45 a.m.•7 views

SUSE CVE-2023-5854

Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS9.5AI score0.01134EPSS
SaveExploits0References4
OSV
OSV
•added 2023/11/01 6:15 p.m.•6 views

DEBIAN-CVE-2023-5854

Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS8.2AI score0.01134EPSS
SaveExploits0References1
OSV
OSV
•added 2023/11/01 6:15 p.m.•23 views

CVE-2023-5854

Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS6.3AI score
SaveExploits0References9
Debian CVE
Debian CVE
•added 2023/11/01 5:14 p.m.•44 views

CVE-2023-5854

Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS9.7AI score0.01134EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2023/11/01 12:00 a.m.•23 views

The vulnerability of the Profiles component in the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Profiles component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through a specially created web page...

7.8CVSS7.6AI score0.01134EPSS
SaveExploits0References11Affected Software4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•0 views

CVE-2023-5854: Use After Free

Use after free in Profiles in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS8.3AI score0.01134EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2023/10/31 12:00 a.m.•13 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from a post-release reuse vulnerability in the Profiles module...

8.8CVSS6.6AI score0.01134EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2023/10/31 12:00 a.m.•15 views

PT-2023-6633 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to a use after free vulnerability in the Profiles component of Google Chrome. This vulnerability can be exploited by a remote attacker who convinces a user to...

9.8CVSS7.6AI score0.99979EPSS
SaveExploits131References1106
Tenable Nessus
Tenable Nessus
•added 2023/10/31 12:00 a.m.•69 views

Google Chrome < 119.0.6045.105 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 119.0.6045.105. It is, therefore, affected by multiple vulnerabilities as referenced in the 202310stable-channel-update-for-desktop31 advisory. - Inappropriate implementation in Downloads in Google Chrome prior to...

8.8CVSS7.7AI score0.07154EPSS
SaveExploits0References27
Positive Technologies
Positive Technologies
•added 2023/10/31 12:00 a.m.•26 views

PT-2023-28487 · Chef · Chef Inspec

Name of the Vulnerable Software and Affected Versions: Chef InSpec versions prior to 4.56.58 Chef InSpec versions prior to 5.22.29 Description: The issue allows local command execution via maliciously crafted profiles, specifically affecting the archive, check, and export commands in Chef InSpec...

8.8CVSS7.7AI score0.00283EPSS
SaveExploits0References7
Mageia
Mageia
•added 2023/10/30 11:05 p.m.•46 views

Updated chromium-browser-stable packages fix bugs including security vulnerabilities

The chromium-browser-stable package has been updated to the 118.0.5993.117 release, fixing bugs and 3 vulnerabilities, together with 118.0.5993.88; some of them are listed below: High CVE-2023-5472: Use after free in Profiles...

8.8CVSS7.1AI score0.01245EPSS
SaveExploits0References3
Circl
Circl
•added 2023/10/30 9:19 p.m.•22 views

CVE-2023-21393

creationtimestamp| type| source ---|---|--- 2023-10-30 21:19:57+00:00| seen| https://t.me/cibsecurity/73177 2025-07-27 04:54:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luwbw644vdd2 2025-07-27 05:39:45+00:00| seen|...

7.8CVSS7.5AI score0.00102EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2023/10/30 12:00 a.m.•20 views

The vulnerability of the Profiles component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Profiles component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure by using a specially created HTML page...

10CVSS8.1AI score0.01245EPSS
SaveExploits0References15Affected Software7
Microsoft CVE
Microsoft CVE
•added 2023/10/27 9:36 p.m.•55 views

Chromium: CVE-2023-5472: Use after free in Profiles

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.01245EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2023/10/27 12:00 a.m.•22 views

FreeBSD : chromium -- multiple vulnerabilities (db33e250-74f7-11ee-8290-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the db33e250-74f7-11ee-8290-a8a1599412c6 advisory. - Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to...

8.8CVSS8.2AI score0.01245EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2023/10/27 12:00 a.m.•34 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0325-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0325-1 advisory. - Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

8.8CVSS8.2AI score0.01245EPSS
SaveExploits0References4
Rows per page
Query Builder