Lucene search
+L

73 matches found

Cvelist
Cvelist
added 2024/01/23 11:53 p.m.34 views

CVE-2024-0813

Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. Chromium security severity: Medium...

9.6AI score0.00382EPSS
Exploits0References4
CVE
CVE
added 2024/01/23 11:53 p.m.147 views

CVE-2024-0813

The CVE-2024-0813 entry documents a Use‑After‑Free in Google Chrome’s Reading Mode prior to 121.0.6167.85. The underlying issue could allow heap corruption when a user is persuaded to install a malicious extension through specific UI interaction, as described in multiple sources. Affected softwar...

8.8CVSS9.3AI score0.00382EPSS
Exploits0References4Affected Software1
Debian CVE
Debian CVE
added 2024/01/23 11:53 p.m.58 views

CVE-2024-0813

Use after free in Reading Mode in Google Chrome prior to 121.0.6167.85 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via specific UI interaction. Chromium security severity: Medium...

8.8CVSS9.3AI score0.00382EPSS
Exploits0
CNNVD
CNNVD
added 2024/01/23 12:0 a.m.14 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the Google Chrome Reading Mode module, which originates from a confusion in the instructions responsible for freeing memory in the Reading Mode module. An attacker can exploit this...

8.8CVSS9.1AI score0.00382EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2024/01/23 12:0 a.m.4 views

PT-2024-1388 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.85 Description: The issue is related to a use after free vulnerability in the Reading Mode of Google Chrome, which can lead to heap corruption. This can potentially allow a remote attacker to execute...

10CVSS7.7AI score0.99735EPSS
Exploits128References1097
FreeBSD
FreeBSD
added 2024/01/23 12:0 a.m.33 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 17 security fixes: 1484394 High CVE-2024-0812: Inappropriate implementation in Accessibility. Reported by Anonymous on 2023-09-19 1504936 High CVE-2024-0808: Integer underflow in WebUI. Reported by Lyra Rebane rebane2001 on 2023-11-24 1496250 Medium...

9.8CVSS7.8AI score0.00579EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/11/03 12:0 a.m.107 views

Microsoft Edge (Chromium) < 118.0.2088.88 / 119.0.2151.44 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.88 / 119.0.2151.44. It is, therefore, affected by multiple vulnerabilities as referenced in the November 2, 2023 advisory. - Microsoft Edge Chromium-based Remote Code Execution Vulnerability CVE-2023-36022,...

8.8CVSS7.2AI score0.07094EPSS
Exploits0References33
Veracode
Veracode
added 2023/11/02 6:39 p.m.20 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the Reading Mode component of the library which allows an attacker to convince user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures...

8.8CVSS7.2AI score0.01005EPSS
Exploits0References10Affected Software1
Microsoft CVE
Microsoft CVE
added 2023/11/02 7:0 a.m.32 views

Chromium: CVE-2023-5855 Use after free in Reading Mode

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.01005EPSS
Exploits0
SUSE CVE
SUSE CVE
added 2023/11/02 2:45 a.m.4 views

SUSE CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS9.5AI score0.01005EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2023/11/02 12:0 a.m.10 views

The vulnerability of Google Chrome’s Reading Mode allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Reading Mode feature in Google Chrome relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through a specially created web page...

7.8CVSS7.6AI score0.01005EPSS
Exploits0References10Affected Software4
NVD
NVD
added 2023/11/01 6:15 p.m.16 views

CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS9AI score0.01005EPSS
Exploits0References9
OSV
OSV
added 2023/11/01 6:15 p.m.1 views

DEBIAN-CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS8.2AI score0.01005EPSS
Exploits0References1
OSV
OSV
added 2023/11/01 6:15 p.m.20 views

CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS6.3AI score
Exploits0References9
UbuntuCve
UbuntuCve
added 2023/11/01 6:15 p.m.31 views

CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS7.2AI score0.01005EPSS
Exploits0References4
Prion
Prion
added 2023/11/01 6:15 p.m.21 views

Design/Logic Flaw

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

6.8CVSS8.9AI score0.01005EPSS
Exploits0References9Affected Software3
Cvelist
Cvelist
added 2023/11/01 5:14 p.m.37 views

CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

9.2AI score0.01005EPSS
Exploits0References9
Debian CVE
Debian CVE
added 2023/11/01 5:14 p.m.55 views

CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS9.7AI score0.01005EPSS
Exploits0
CNNVD
CNNVD
added 2023/10/31 12:0 a.m.7 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which originates from a post-release reuse vulnerability in the Reading Mode module...

8.8CVSS6.6AI score0.01005EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2023/10/31 12:0 a.m.63 views

Google Chrome < 119.0.6045.105 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 119.0.6045.105. It is, therefore, affected by multiple vulnerabilities as referenced in the 202310stable-channel-update-for-desktop31 advisory. - Inappropriate implementation in Downloads in Google Chrome prior to...

8.8CVSS7.7AI score0.07094EPSS
Exploits0References27
Rows per page
Query Builder