Lucene search
+L

319 matches found

UbuntuCve
UbuntuCve
added 2022/02/12 12:15 a.m.23 views

CVE-2022-0098

Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures...

8.8CVSS7.2AI score0.00933EPSS
SaveExploits1References1
OSV
OSV
added 2022/02/12 12:15 a.m.4 views

UBUNTU-CVE-2022-0098

Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures...

8.8CVSS7.3AI score0.00933EPSS
SaveExploits1References2
Prion
Prion
added 2022/02/12 12:15 a.m.23 views

Design/Logic Flaw

Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures...

6.8CVSS9.2AI score0.00933EPSS
SaveExploits1References5Affected Software2
Cvelist
Cvelist
added 2022/02/11 11:35 p.m.28 views

CVE-2022-0098

Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures...

9.5AI score0.00933EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2022/02/11 11:35 p.m.33 views

CVE-2022-0098

Use after free in Screen Capture in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an attacker who convinced a user to perform specific user gestures to potentially exploit heap corruption via specific user gestures...

8.8CVSS9.7AI score0.00933EPSS
SaveExploits1
CVE
CVE
added 2022/02/11 11:35 p.m.131 views

CVE-2022-0098

CVE-2022-0098 involves a use-after-free in Chrome OS Screen Capture. The vulnerability can allow heap corruption when a user is convinced to perform specific gestures, potentially enabling arbitrary code execution. Affected software is Google Chrome/Chromium with the Screen Capture component prio...

8.8CVSS9.2AI score0.00933EPSS
SaveExploits1References5Affected Software1
hivepro
hivepro
added 2022/02/07 2:23 p.m.26 views

Iranian state-sponsored APT group MuddyWater targeting organizations via malicious executables

THREAT LEVEL: Red. United States Cyber Command USCYBERCOM has warned of an ongoing cyber attack by Iranian state sponsored actor named as MuddyWater. This APT group is currently targeting Middle Eastern countries and has also targeted European and North American nations. The Iranian-backed...

0.1AI score
SaveExploits0
Qualys Blog
Qualys Blog
added 2022/02/03 7:22 a.m.39 views

Catching the RAT called Agent Tesla

For the last few years, the Qualys Research Team has been observing an infamous "Malware-as-a-service" RAT Remote Access Trojan called Agent Tesla. It first appeared in 2014, and since then many variants have been deployed. This malware uses multiple techniques for evading detection as well as...

0.1AI score
SaveExploits0
Mageia
Mageia
added 2022/02/02 9:29 p.m.87 views

Updated chromium-browser-stable packages fix security vulnerability

CVE-2022-0096: Use after free in Storage. CVE-2022-0097: Inappropriate implementation in DevTools. CVE-2022-0098: Use after free in Screen Capture. CVE-2022-0099: Use after free in Sign-in. CVE-2022-0100: Heap buffer overflow in Media streams API. CVE-2022-0101: Heap buffer overflow in Bookmarks...

9.6CVSS8.5AI score0.85352EPSS
SaveExploits21References3
Microsoft CVE
Microsoft CVE
added 2022/02/02 2:3 a.m.27 views

Chromium: CVE-2022-0459 Use after free in Screen Capture

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.0078EPSS
SaveExploits0
CNVD
CNVD
added 2022/01/11 12:0 a.m.35 views

Google Chrome resource management error vulnerability

Google Chrome is a Web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which stems from the product's screen capture component referencing freed memory. A remote attacker could use this vulnerability to create a specially crafted web page, trick a vict...

8.8CVSS2.8AI score0.00933EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
added 2022/01/06 8:0 a.m.23 views

Chromium: CVE-2022-0098 Use after free in Screen Capture

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.00933EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2022/01/06 12:0 a.m.68 views

Microsoft Edge (Chromium) < 97.0.1072.55 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 97.0.1072.55. It is, therefore, affected by multiple vulnerabilities as referenced in the January 6, 2022 advisory. - Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an...

9.6CVSS7.2AI score0.02543EPSS
SaveExploits20References59
Tenable Nessus
Tenable Nessus
added 2022/01/05 12:0 a.m.35 views

FreeBSD : chromium -- multiple vulnerabilities (9eeccbf3-6e26-11ec-bb10-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9eeccbf3-6e26-11ec-bb10-3065ec8fd3ec advisory. - Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allow...

9.6CVSS7.4AI score0.015EPSS
SaveExploits19References26
Tenable Nessus
Tenable Nessus
added 2022/01/04 12:0 a.m.117 views

Google Chrome < 97.0.4692.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 97.0.4692.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202201stable-channel-update-for-desktop advisory. - Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a...

9.6CVSS7.5AI score0.015EPSS
SaveExploits21References51
Tenable Nessus
Tenable Nessus
added 2022/01/04 12:0 a.m.57 views

Google Chrome < 97.0.4692.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 97.0.4692.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202201stable-channel-update-for-desktop advisory. - Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed ...

9.6CVSS7.5AI score0.015EPSS
SaveExploits21References51
CNNVD
CNNVD
added 2022/01/04 12:0 a.m.8 views

Google Chrome 资源管理错误漏洞

Google Chrome is a Web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which stems from the product's screen capture component referencing freed memory. A remote attacker could use this vulnerability to create a specially crafted web page, trick a vict...

8.8CVSS8.9AI score0.00933EPSS
SaveExploits1References14
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2022/01/04 12:0 a.m.392 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 97 to the stable channel for Windows, Mac and Linux.This will roll out over the coming days/weeks. Chrome 97.0.4692.71 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

9.6CVSS9AI score0.015EPSS
SaveExploits23Affected Software1
OPENSUSE Linux
OPENSUSE Linux
added 2021/12/28 12:0 a.m.58 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1632-1 Rating: important References: 1192310 1192734 1193519 1193713 Cross-References: CVE-2021-38005 CVE-2021-38006 CVE-2021-38007 CVE-2021-38008 CVE-2021-38009 CVE-2021-38010 CVE-2021-38011 CVE-2021-38012...

9.6CVSS9.3AI score0.07836EPSS
SaveExploits2References4
OSV
OSV
added 2021/12/23 1:15 a.m.2 views

DEBIAN-CVE-2021-4064

Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.5AI score0.0128EPSS
SaveExploits0References1
Rows per page
Query Builder