GLSA-202402-14 : QtWebEngine: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202402-14 QtWebEngine: Multiple Vulnerabilities - Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...

[SECURITY] Fedora 39 Update: qt5-qtwebengine-5.15.16-1.fc39

Qt5 - QtWebEngine components...

Fedora: Security Advisory (FEDORA-2024-bf2399e5e5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 39 : qt5-qtwebengine (2024-bf2399e5e5)

The remote Fedora 39 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-bf2399e5e5 advisory. QtWebEngine 5.15.16 bugfix update. Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not...

qt5-webengine -- Multiple vulnerabilities

Qt qtwebengine-chromium repo reports: Backports for 8 security bugs in Chromium: 1505053 High CVE-2023-6345: Integer overflow in Skia 1501326 High CVE-2023-6702: Type Confusion in V8 1513170 High CVE-2023-7024: Heap buffer overflow in WebRTC 1501798 High CVE-2024-0222: Use after free in ANGLE...

QtWebEngine: Multiple Vulnerabilities

Background QtWebEngine is a library for rendering dynamic web content in Qt5 and Qt6 C++ and QML applications. Description Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE...

GLSA-202311-11 : QtWebEngine: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202311-11 QtWebEngine: Multiple Vulnerabilities - Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. CVE-2022-2294 -...

QtWebEngine: Multiple Vulnerabilities

Background QtWebEngine is a library for rendering dynamic web content in Qt5 and Qt6 C++ and QML applications. Description Multiple vulnerabilities have been discovered in QtWebEngine. Please review the CVE identifiers referenced below for details. Impact Please review the referenced CVE...

Use-After-Free

qt5-qtwebengine is vulnerable to Use-After-Free. A malicious attacker could convince a user to install a malicious extension leading to heap corruption via a crafted HTML page...

Type Confusion

qt5-qtwebengine is vulnerable to Type Confusion. A malicious attacker could remotely exploit heap corruption via a crafted HTML page...

Use-After-Free

qt5-qtwebengine is vulnerable to Use-After-Free. A malicious attacker could convince a user to install a malicious extension leading to heap corruption via a crafted HTML page...

Use-After-Free

qt5-qtwebengine is vulnerable to Use-After-Free. The vulnerabuility allows a malicious attacker to exploit heap corruption via a crafted PDF file resulting in use-after-free...

Use-After-Free

qt5-qtwebengine is vulnerable to Use-After-Free. The vulnerabuility allows a malicious attacker to exploit heap corruption via a crafted PDF file resulting in use-after-free...

Use-After-Free

qt5-qtwebengine is vulnerable to Use-After-Free. A malicious attacker could potentially exploit heap corruption via a crafted HTML page leading to use-after-free...

Fedora: Security Advisory for qt6-qtwebengine (FEDORA-2023-a48406ecd2)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 38 Update: qt6-qtwebengine-6.4.2-3.fc38

Qt6 - QtWebEngine components...

[SECURITY] Fedora 38 Update: qt6-qtwebengine-6.4.2-4.fc38

Qt6 - QtWebEngine components...

Fedora: Security Advisory for qt6-qtwebengine (FEDORA-2023-a5e10b188a)

The remote host is missing an update for the Copyright C 2023 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 38 : cairo / freetype / harfbuzz / qt6-qtwebengine (2023-a48406ecd2)

The remote Fedora 38 host has packages installed that are affected by multiple vulnerabilities as referenced in the FEDORA-2023-a48406ecd2 advisory. Security fix for CVE-2023-25193 Update of HarfBuzz to 7.0.1 version 2169172 Update of freetype to 2.13.0 version 2168496 ---- Security fix for...

Out-of-bounds Read

qt5-qtwebengine is vulnerable to Out-of-bounds Read. This vulnerability allows an attacker to carry out an out of bounds memory read via a crafted HTML page...