Lucene search
+L

89 matches found

Tenable Nessus
Tenable Nessus
•added 2023/11/03 12:00 a.m.•116 views

Microsoft Edge (Chromium) < 118.0.2088.88 / 119.0.2151.44 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 118.0.2088.88 / 119.0.2151.44. It is, therefore, affected by multiple vulnerabilities as referenced in the November 2, 2023 advisory. - Microsoft Edge Chromium-based Remote Code Execution Vulnerability CVE-2023-36022,...

8.8CVSS7.2AI score0.07154EPSS
SaveExploits0References33
Veracode
Veracode
•added 2023/11/02 6:39 p.m.•26 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the Reading Mode component of the library which allows an attacker to convince user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures...

8.8CVSS7.2AI score0.01014EPSS
SaveExploits0References10Affected Software1
Microsoft CVE
Microsoft CVE
•added 2023/11/02 7:00 a.m.•38 views

Chromium: CVE-2023-5855 Use after free in Reading Mode

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.01014EPSS
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/11/02 2:45 a.m.•10 views

SUSE CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS9.5AI score0.01014EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/11/02 12:00 a.m.•29 views

The vulnerability of Google Chrome’s Reading Mode allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Reading Mode feature in Google Chrome relates to the use of memory after it is released. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information through a specially created web page...

7.8CVSS7.6AI score0.01014EPSS
SaveExploits0References10Affected Software4
NVD
NVD
•added 2023/11/01 6:15 p.m.•21 views

CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS9AI score0.01014EPSS
SaveExploits0References9
OSV
OSV
•added 2023/11/01 6:15 p.m.•42 views

CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS6.3AI score
SaveExploits0References9
OSV
OSV
•added 2023/11/01 6:15 p.m.•8 views

DEBIAN-CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS8.2AI score0.01014EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
•added 2023/11/01 6:15 p.m.•36 views

CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS7.2AI score0.01014EPSS
SaveExploits0References4
Prion
Prion
•added 2023/11/01 6:15 p.m.•25 views

Design/Logic Flaw

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

6.8CVSS8.9AI score0.01014EPSS
SaveExploits0References9Affected Software3
Mend
Mend
•added 2023/11/01 5:14 p.m.•1 views

CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS0.01014EPSS
SaveExploits0References10
Debian CVE
Debian CVE
•added 2023/11/01 5:14 p.m.•64 views

CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS9.7AI score0.01014EPSS
SaveExploits0
Cvelist
Cvelist
•added 2023/11/01 5:14 p.m.•54 views

CVE-2023-5855

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

9.2AI score0.01014EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/11/01 12:00 a.m.•1 views

CVE-2023-5855: Use After Free

Use after free in Reading Mode in Google Chrome prior to 119.0.6045.105 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. Chromium security severity: Medium...

8.8CVSS8.3AI score0.01014EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2023/10/31 12:00 a.m.•15 views

PT-2023-6644 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to a use after free in Reading Mode, which could allow a remote attacker to potentially exploit heap corruption via specific UI gestures if a user is convinced t...

9.8CVSS8.1AI score0.99979EPSS
SaveExploits131References1105
CNNVD
CNNVD
•added 2023/10/31 12:00 a.m.•20 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which originates from a post-release reuse vulnerability in the Reading Mode module...

8.8CVSS6.6AI score0.01014EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
•added 2023/10/31 12:00 a.m.•71 views

Google Chrome < 119.0.6045.105 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 119.0.6045.105. It is, therefore, affected by multiple vulnerabilities as referenced in the 202310stable-channel-update-for-desktop31 advisory. - Inappropriate implementation in Downloads in Google Chrome prior to...

8.8CVSS7.7AI score0.07154EPSS
SaveExploits0References27
BDU FSTEC
BDU FSTEC
•added 2022/05/23 12:00 a.m.•11 views

The vulnerability in the reading mode of Firefox web browsers, Firefox ESR, and the Thunderbird email client allows a hacker to circumvent the established security restrictions.

The vulnerability in the reading mode of Firefox web browsers, Firefox ESR, and the Thunderbird email client is related to the reliance on cookie files without checking their validity and integrity when processing the SameSite attribute. Exploiting this vulnerability can allow an attacker to...

6.4CVSS6.7AI score0.0065EPSS
SaveExploits1References15Affected Software8
BDU FSTEC
BDU FSTEC
•added 2021/11/02 12:00 a.m.•15 views

The vulnerability of the reading mode in Google Chrome’s web browser involves writing beyond the buffer in memory, allowing an attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Google Chrome web browser’s reading mode is related to writing beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and even cause service interruptions through a specially created...

8.8CVSS7.8AI score0.01343EPSS
SaveExploits1References10Affected Software6
BDU FSTEC
BDU FSTEC
•added 2021/03/15 12:00 a.m.•20 views

The vulnerability of the Google Chrome browser’s reading mode, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s reading mode is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

7.8CVSS7AI score0.0094EPSS
SaveExploits0References6Affected Software4
Rows per page
Query Builder