Lucene search
+L

584 matches found

Cvelist
Cvelist
added 2022/07/28 12:0 a.m.37 views

CVE-2022-2480

Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

9.1AI score0.17864EPSS
SaveExploits0References6
CVE
CVE
added 2022/07/28 12:0 a.m.248 views

CVE-2022-2480

The CVE-2022-2480 entry concerns a Use after free in the Service Worker API in Google Chrome, affecting versions prior to 103.0.5060.134. The connected sources confirm heap corruption as the potential impact when a crafted HTML page triggers the vulnerability. Remediation documented in Debian/rel...

8.8CVSS8.8AI score0.17864EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2022/07/28 12:0 a.m.65 views

CVE-2022-2480

Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.5AI score0.17864EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/07/28 12:0 a.m.81 views

CVE-2022-2480

Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9AI score0.17864EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/07/23 12:0 a.m.145 views

Microsoft Edge (Chromium) < 103.0.1264.71 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 103.0.1264.71. It is, therefore, affected by multiple vulnerabilities as referenced in the July 22, 2022 advisory. - : Use after free in Guest View. CVE-2022-2477 - : Use after free in PDF. CVE-2022-2478 - : Insufficie...

8.8CVSS6.7AI score0.17864EPSS
SaveExploits0References11
Microsoft CVE
Microsoft CVE
added 2022/07/22 7:0 a.m.79 views

Chromium: CVE-2022-2480 Use after free in Service Worker API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.17864EPSS
SaveExploits0
Veracode
Veracode
added 2022/07/21 9:43 a.m.186 views

Use-After-Free

chromium is vulnerable to use-after-free. The vulnerability is possible because of a flaw in the Service Worker API component, which leads to heap use-after-free...

8.8CVSS8.3AI score0.17864EPSS
SaveExploits0References9Affected Software2
Tenable Nessus
Tenable Nessus
added 2022/07/20 12:0 a.m.44 views

FreeBSD : chromium -- multiple vulnerabilities (27cc4258-0805-11ed-8ac1-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 27cc4258-0805-11ed-8ac1-3065ec8fd3ec advisory. - Use after free in Cast UI and Toolbar. CVE-2022-2163 - : Use after free in Guest View...

8.8CVSS7AI score0.17864EPSS
SaveExploits0References8
FreeBSD
FreeBSD
added 2022/07/19 12:0 a.m.59 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 11 security fixes, including: 1336266 High CVE-2022-2477: Use after free in Guest View. Reported by anonymous on 2022-06-14 1335861 High CVE-2022-2478: Use after free in PDF. Reported by triplepwns on 2022-06-13 1329987 High CVE-2022-2479: Insufficie...

8.8CVSS0.6AI score0.17864EPSS
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:22 p.m.5 views

Malicious code in service-worker-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0227fa64f6580d83366ed4110cea0b88710287e47c32ad089750b4cb645e3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:22 p.m.7 views

MAL-2022-6034 Malicious code in service-worker-detector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e0227fa64f6580d83366ed4110cea0b88710287e47c32ad089750b4cb645e3b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSV
OSV
added 2022/06/13 5:46 a.m.10 views

MAL-2022-6981 Malicious code in vso-service-worker-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 521d9c0aa9e811392cdcb626e976bbd45fb4f70615153f303716350975b432b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/13 5:46 a.m.5 views

Malicious code in vso-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccb422332a19aeef03b4767503a00b97068dcb0b6f6119143f0060dae741b750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/13 5:46 a.m.12 views

MAL-2022-6980 Malicious code in vso-service-worker (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccb422332a19aeef03b4767503a00b97068dcb0b6f6119143f0060dae741b750 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2022/05/20 11:16 p.m.40 views

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

8.8CVSS3.3AI score0.00626EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2022/02/17 12:0 a.m.10 views

The vulnerability of the Service Worker API in browsers such as Google Chrome and Microsoft Edge allows a malicious actor to execute arbitrary code.

The vulnerability of the Service Worker API in browsers such as Google Chrome and Microsoft Edge is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

10CVSS7.2AI score0.00626EPSS
SaveExploits0References9Affected Software6
NVD
NVD
added 2022/02/12 2:15 a.m.19 views

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS0.00626EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/12 2:15 a.m.7 views

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS8.5AI score
SaveExploits0References2
OSV
OSV
added 2022/02/12 2:15 a.m.2 views

DEBIAN-CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/02/12 2:15 a.m.7 views

CVE-2022-0305

Inappropriate implementation in Service Worker API in Google Chrome prior to 97.0.4692.99 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page...

6.5CVSS6.8AI score0.00626EPSS
SaveExploits0References3
Rows per page
Query Builder