Lucene search
+L

857 matches found

Vulnrichment
Vulnrichment
•added 2022/09/26 3:01 p.m.•7 views

CVE-2022-3058

Use after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction...

7AI score0.00803EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2022/09/26 3:01 p.m.•10 views

CVE-2022-2858

Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction...

9.1AI score0.00944EPSS
SaveExploits0References3
CVE
CVE
•added 2022/09/26 3:01 p.m.•154 views

CVE-2022-2858

CVE-2022-2858 affects Google Chrome/Chromium: a use-after-free in the Sign-In Flow can lead to heap corruption via specific UI interactions. Affected products/versions are Chromium/Chrome before 104.0.5112.101; Debian and other trackers note the fix in 104.0.5112.101 (or later) for Chromium. Expl...

8.8CVSS8.9AI score0.00944EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
•added 2022/09/26 3:01 p.m.•46 views

CVE-2022-2858

Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction...

9.2AI score0.00944EPSS
SaveExploits0References3
Debian CVE
Debian CVE
•added 2022/09/26 3:01 p.m.•78 views

CVE-2022-2858

Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction...

8.8CVSS9.7AI score0.00944EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/26 12:00 a.m.•1 views

CVE-2022-3058: Use After Free

Use after free in Sign-In Flow in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction...

8.8CVSS7.9AI score0.00803EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/26 12:00 a.m.•2 views

CVE-2022-2858: Use After Free

Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction...

8.8CVSS8.7AI score0.00944EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
•added 2022/09/13 7:00 a.m.•105 views

September 13, 2022—KB5017328 (OS Build 22000.978)

None None...

9.8CVSS6.8AI score0.86045EPSS
SaveExploits7
Tenable Nessus
Tenable Nessus
•added 2022/09/13 12:00 a.m.•38 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10119-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10119-1 advisory. - Use after free in Network Service. CVE-2022-3038 - Use after free in WebSQL. CVE-2022-3039, CVE-2022-3041 - Use after free in Layout...

9.6CVSS7.9AI score0.24738EPSS
SaveExploits1References50
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/09/06 12:00 a.m.•4 views

CVE-2022-36072: Use of Wrong Operator in String Comparison

SilverwareGames.io is a social network for users to play video games online. In version 1.1.8 and prior, due to an unobvious feature of PHP, hashes generated by built-in functions and starting with the 0e symbols were being handled as zero multiplied with the e number. Therefore, the hash value w...

5.9CVSS6.1AI score0.00554EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/09/02 12:00 a.m.•66 views

Debian DSA-5223-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5223 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For the...

8.8CVSS7.8AI score0.24738EPSS
SaveExploits1References48
Tenable Nessus
Tenable Nessus
•added 2022/09/02 12:00 a.m.•78 views

Microsoft Edge (Chromium) < 105.0.1343.25 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 105.0.1343.25. It is, therefore, affected by multiple vulnerabilities as referenced in the September 1, 2022 advisory. - Use after free in Network Service. CVE-2022-3038 - Use after free in WebSQL. CVE-2022-3039,...

8.8CVSS7.2AI score0.24738EPSS
SaveExploits1References31
BDU FSTEC
BDU FSTEC
•added 2022/09/02 12:00 a.m.•15 views

The vulnerability of the Sign-In component in Microsoft Edge and Google Chrome browsers allows a perpetrator to trigger a service failure.

The vulnerability of the Sign-In component in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5CVSS7.5AI score0.00803EPSS
SaveExploits0References8Affected Software5
Microsoft CVE
Microsoft CVE
•added 2022/09/01 4:05 p.m.•60 views

Chromium: CVE-2022-3058 Use after free in Sign-In Flow

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.00803EPSS
SaveExploits0
Kaspersky
Kaspersky
•added 2022/09/01 12:00 a.m.•50 views

KLA15734 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Pointer Lock can be exploited to cause denial of service...

8.8CVSS9.4AI score0.24738EPSS
SaveExploits1References18
Tenable Nessus
Tenable Nessus
•added 2022/08/31 12:00 a.m.•49 views

FreeBSD : chromium -- multiple vulnerabilities (f2043ff6-2916-11ed-a1ef-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f2043ff6-2916-11ed-a1ef-3065ec8fd3ec advisory. - Use after free in Network Service. CVE-2022-3038 - Use after free in WebSQL. CVE-2022-3039,...

8.8CVSS7.8AI score0.24738EPSS
SaveExploits1References23
Kaspersky
Kaspersky
•added 2022/08/30 12:00 a.m.•588 views

KLA15732 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Layout can be exploited to caus...

8.8CVSS9.7AI score0.24738EPSS
SaveExploits3References4
BDU FSTEC
BDU FSTEC
•added 2022/08/29 12:00 a.m.•17 views

The vulnerability of the Sign-In component in Google Chrome and Microsoft Edge browsers allows a hacker to elevate their privileges.

The vulnerability of the Sign-In component in Google Chrome and Microsoft Edge browsers relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially created web page...

10CVSS7.6AI score0.00751EPSS
SaveExploits0References12Affected Software7
Microsoft CVE
Microsoft CVE
•added 2022/08/19 7:00 a.m.•63 views

Chromium: CVE-2022-2858 Use after free in Sign-In Flow

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.00944EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/08/19 12:00 a.m.•14 views

The vulnerability of the Sign-In component in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code.

The vulnerability of the Sign-In component in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

10CVSS8.1AI score0.00944EPSS
SaveExploits0References10Affected Software6
Rows per page
Query Builder