golang: regexp: stack exhaustion via a deeply nested expression

A stack overflow flaw was found in Golang's regexp module, which can crash the runtime if the application using regexp accepts very long or arbitrarily long regexps from untrusted sources that have sufficient nesting depths. To exploit this vulnerability, an attacker would need to send large...

KLA12601 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, gain privileges, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Implementati...

Vim utf_ptr2char function buffer overflow vulnerability

Vim is a cross-platform text editor. Vim is vulnerable to a buffer overflow vulnerability that stems from a boundary error in the utfptr2char function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system...

Vim 缓冲区错误漏洞

Vim is a cross-platform text editor. Vim is vulnerable to a buffer overflow vulnerability that stems from a boundary error in the utfptr2char function when handling untrusted input. A remote attacker could exploit this vulnerability to execute arbitrary code on the system...

Adobe Acrobat Reader Buffer Overflow Vulnerability (CNVD-2022-54890)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A buffer overflow vulnerability exists in Adobe Acrobat Reader version 22.001.20142 and earlier, version 20.005.30334 and earlier, which stems from a boundary error...

CVE-2022-2479

Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious app to obtain potentially sensitive information from internal file directories via a crafted HTML page...

CVE-2022-2479

Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious app to obtain potentially sensitive information from internal file directories via a crafted HTML page...

CVE-2022-2479

CVE-2022-2479 affects Google Chrome/Chromium, with insufficient validation of untrusted input in a file-context on Android before version 103.0.5060.134. An attacker could entice a user to install a malicious app and, via a crafted HTML page, read potentially sensitive information from internal f...

Adobe Acrobat Reader 缓冲区错误漏洞

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. A buffer overflow vulnerability exists in Adobe Acrobat Reader version 22.001.20142 and earlier, version 20.005.30334 and earlier, which stems from a boundary error...

Apple iOS and iPadOS GPU Driver Code Injection Vulnerability

Apple iOS and Apple iPadOS are both products of Apple, an operating system developed for mobile devices. The vulnerability is caused by a boundary error in the GPU driver when handling untrusted input, which can be exploited to execute arbitrary code with root privileges...

Apple iOS and iPadOS ImageIO Buffer Overflow Vulnerability

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A buffer error vulnerability exists in Apple iOS prior to 15.6 and iPadOS prior to 15.6, which stems from a...

Apple macOS Monterey Buffer Overflow Vulnerability

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. Apple macOS Monterey suffers from a buffer overflow vulnerability that originates from a boundary error in the handling of untrusted input in the SMB component, which can be exploited by an...

多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A buffer overflow vulnerability exists in iOS and iPadOS, which originates from a boundary error in the GPU...

多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A buffer error vulnerability exists in Apple iOS prior to 15.6 and iPadOS prior to 15.6, which stems from a...

Apple macOS Monterey 缓冲区错误漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. Apple macOS Monterey suffers from a buffer overflow vulnerability that originates from a boundary error in the handling of untrusted input in the SMB component, which can be exploited by an...

多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc.Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for iPad tablets. A buffer error vulnerability exists in Apple iOS prior to 15.6 and iPadOS prior to 15.6, which stems from a boundary error ...

多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS suffers from a buffer overflow vulnerability that originates from a boundary error in the operating...

Apple iOS 和 iPadOS 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. Apple iOS and iPadOS buffer overflow vulnerability, which originates from a boundary error in ImageIO when...

多款Apple产品 缓冲区错误漏洞

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A buffer error vulnerability exists in Apple iOS and iPadOS, which stems from a boundary error in WebKit when...

jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck

jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck loop indefinitely until...