Lucene search
+L

543 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 4:3 a.m.3 views

SUSE CVE-2020-6389

Out of bounds write in WebRTC in Google Chrome prior to 80.0.3987.87 allowed a remote attacker to potentially exploit heap corruption via a crafted video stream...

8.8CVSS7.7AI score0.01742EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 4:2 a.m.5 views

SUSE CVE-2020-6529

Inappropriate implementation in WebRTC in Google Chrome prior to 84.0.4147.89 allowed an attacker in a privileged network position to leak cross-origin data via a crafted HTML page...

4.3CVSS5.8AI score0.01306EPSS
Exploits0References9
SUSE CVE
SUSE CVE
added 2023/02/15 3:59 a.m.4 views

SUSE CVE-2020-12424

When constructing a permission prompt for WebRTC, a URI was supplied from the content process. This URI was untrusted, and could have been the URI of an origin that was previously granted permission; bypassing the prompt. This vulnerability affects Firefox 78...

6.5CVSS8.2AI score0.01392EPSS
Exploits0References10
SUSE CVE
SUSE CVE
added 2023/02/15 3:56 a.m.2 views

SUSE CVE-2020-15969

Use after free in WebRTC in Google Chrome prior to 86.0.4240.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.9AI score0.01705EPSS
Exploits0References25
SUSE CVE
SUSE CVE
added 2023/02/15 3:56 a.m.2 views

SUSE CVE-2020-16008

Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption via a crafted WebRTC packet...

8.8CVSS9.1AI score0.01138EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 3:55 a.m.1 views

SUSE CVE-2020-16044

Use after free in WebRTC in Google Chrome prior to 88.0.4324.96 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet...

7.5CVSS9AI score0.01304EPSS
Exploits0References21
SUSE CVE
SUSE CVE
added 2023/02/15 3:42 a.m.4 views

SUSE CVE-2021-30523

Use after free in WebRTC in Google Chrome prior to 91.0.4472.77 allowed a remote attacker to potentially exploit heap corruption via a crafted SCTP packet...

8.8CVSS9AI score0.01102EPSS
Exploits1References5
OSV
OSV
added 2023/02/07 9:15 p.m.4 views

DEBIAN-CVE-2023-0698

Out of bounds read in WebRTC in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

8.8CVSS8AI score0.00649EPSS
Exploits0References1
OSV
OSV
added 2023/01/30 9:15 a.m.1 views

DEBIAN-CVE-2023-0472

Use after free in WebRTC in Google Chrome prior to 109.0.5414.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.2AI score0.00691EPSS
Exploits0References1
CISA KEV Catalog
CISA KEV Catalog
added 2022/08/25 12:0 a.m.75 views

WebRTC Heap Buffer Overflow Vulnerability

WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome...

8.8CVSS8.8AI score0.70461EPSS
In wildExploits0
OSV
OSV
added 2022/07/28 2:15 a.m.0 views

DEBIAN-CVE-2022-2294

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.70461EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/07/04 12:0 a.m.2 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, Inc. A remote code execution vulnerability exists in Google Chrome WebRTC, which stems from a heap buffer overflow in WebRTC and can be exploited to construct malicious data to execute arbitrary code on the target system...

8.8CVSS7.3AI score0.70461EPSS
Exploits0References26
Positive Technologies
Positive Technologies
added 2022/05/16 12:0 a.m.4 views

PT-2022-7558 · Unknown +6 · Wpe Webkit +6

Name of the Vulnerable Software and Affected Versions: WPE WebKit versions prior to 2.36.4 WebKitGTK versions prior to 2.36.4 Description: The issue is related to errors in resource release, allowing a remote attacker to impact data integrity. It involves a logic problem in handling concurrent...

8.8CVSS5.4AI score0.01343EPSS
Exploits0References52
CNNVD
CNNVD
added 2022/05/16 12:0 a.m.3 views

Apple iOS和Apple iPadOS 资源管理错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A resource management error vulnerability exists in Apple iOS and Apple iPadOS, which arises from a logic issue in the vid...

4.3CVSS6.7AI score0.00633EPSS
Exploits0References19
CNNVD
CNNVD
added 2022/03/29 12:0 a.m.4 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. Google Chrome suffers from a resource management error vulnerability that exists due to a post-release usage error in the WebRTC component in Google Chrome. A remote attacker could create a specially...

8.8CVSS8.2AI score0.00862EPSS
Exploits1References9
ATTACKERKB
ATTACKERKB
added 2022/02/18 10:15 p.m.6 views

CVE-2022-23228

Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service...

7.5CVSS7.2AI score0.01324EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:0 a.m.6 views

The vulnerability of the WebRTC extension in Google Chrome allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the WebRTC extension in Google Chrome browser stems from an overflow in the buffer in dynamic memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information by using specially created...

7.5CVSS7.9AI score0.00846EPSS
Exploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/12/28 12:0 a.m.6 views

The vulnerability of the WebRTC extension of the Microsoft Edge browser allows a perpetrator to compromise the confidentiality, integrity, and accessibility of information.

The vulnerability of the Fedora operating system is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of information...

8.8CVSS7.4AI score0.02798EPSS
Exploits0References8Affected Software7
CNNVD
CNNVD
added 2021/12/08 12:0 a.m.6 views

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an out-of-bounds write vulnerability that originates from a boundary error when WebRTC processes untrusted input. A remote attacker can exploit the vulnerability to execute arbitrary code on the system...

8.8CVSS9AI score0.00846EPSS
Exploits0References8
The Hacker News
The Hacker News
added 2021/09/24 1:15 p.m.30 views

Apple's New iCloud Private Relay Service Leaks Users' Real IP Addresses

A new as-yet unpatched weakness in Apple's iCloud Private Relay feature could be circumvented to leak users' true IP addresses from iOS devices running the latest version of the operating system. Introduced as a beta with iOS 15, which was officially released this week, iCloud Private Relay aims ...

6.3AI score
Exploits0
Rows per page
Query Builder