Lucene search
+L

805 matches found

ThreatPost
ThreatPost
added 2022/03/30 4:14 p.m.196 views

Google Chrome Bug Actively Exploited as Zero-Day

Google has updated its Stable channel for the desktop version of Chrome, to address a zero-day security vulnerability that’s being actively exploited in the wild. The bug, tracked as CVE-2022-1096, is a type-confusion issue in the V8 JavaScript engine, which is an open-source engine used by Chrom...

9.6CVSS9.6AI score0.70445EPSS
SaveExploits9References12
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/28 12:0 a.m.32 views

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge...

8.8CVSS8.8AI score0.23633EPSS
SaveIn wildExploits1
VulnCheck KEV
VulnCheck KEV
added 2022/03/23 12:0 a.m.2 views

VulnCheck KEV: CVE-2022-1096

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...

8.8CVSS7.5AI score0.23633EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2022/03/11 12:0 a.m.8 views

Lg Electronics Lg WebOs 安全漏洞

Lg Electronics Lg WebOs is a Linux kernel-based smart TV operating system from Lg Electronics, a South Korean company. A security vulnerability exists in Lg Electronics Lg WebOs that originates from a local elevation of privilege via a V8 engine vulnerability heap vulnerability...

7.8CVSS7.3AI score0.00627EPSS
SaveExploits1References2
OSV
OSV
added 2022/02/12 12:15 a.m.8 views

CVE-2022-0102

Type confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.1AI score
SaveExploits0References5
OSV
OSV
added 2022/02/11 11:15 p.m.4 views

UBUNTU-CVE-2021-4102

Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.07836EPSS
SaveExploits0References3
hivepro
hivepro
added 2022/02/11 7:15 a.m.17 views

Google Chrome affected by high severity vulnerabilities

THREAT LEVEL: Green. For a detailed advisory, download the pdf file here Google has released Chrome 98 as a stable channel for Windows, Mac, and Linux. This update addresses 19 security vulnerabilities. Eight of them are rated severity high, ten of them are medium and one of them is of severity...

0.8AI score
SaveExploits0
Veracode
Veracode
added 2022/01/20 6:21 a.m.19 views

Denial Of Service (DoS)

chromium-browser is vulnerable to denial of service. The vulnerability exists due to the type confusion in V8 engine in google chrome, which allows an attacker to crash the application via a crafted HTML page...

8.8CVSS2.1AI score0.01387EPSS
SaveExploits0References7Affected Software2
Check Point Advisories
Check Point Advisories
added 2022/01/17 12:0 a.m.29 views

Google Chromium V8 Engine Use-After-Free (CVE-2021-4102)

A use-after-free vulnerability exists in Google Chromium V8 Engine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS5.3AI score0.07836EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/01/12 12:0 a.m.5 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially crafted HTML page...

7.5CVSS7.7AI score0.00961EPSS
SaveExploits0References6Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/01/10 12:0 a.m.18 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.8CVSS8AI score0.00875EPSS
SaveExploits0References9Affected Software7
OSV
OSV
added 2021/12/23 1:15 a.m.12 views

CVE-2021-4078

Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.8AI score
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2021/12/23 1:15 a.m.9 views

CVE-2021-4061

Type confusion in V8 in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.7AI score0.01387EPSS
SaveExploits0References7
Prion
Prion
added 2021/12/23 1:15 a.m.31 views

Type confusion

Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.7AI score0.00912EPSS
SaveExploits0References4Affected Software3
CISA KEV Catalog
CISA KEV Catalog
added 2021/12/15 12:0 a.m.58 views

Google Chromium V8 Use-After-Free Vulnerability

Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge...

8.8CVSS8.7AI score0.07836EPSS
SaveIn wildExploits0
The Hacker News
The Hacker News
added 2021/12/14 4:13 a.m.133 views

Update Google Chrome to Patch New Zero-Day Exploit Detected in the Wild

Google has rolled out fixes for five security vulnerabilities in its Chrome web browser, including one which it says is being exploited in the wild, making it the 17th such weakness to be disclosed since the start of the year. Tracked as CVE-2021-4102, the flaw relates to a use-after-free bug in...

9.6CVSS1.6AI score0.69291EPSS
SaveExploits16
OSV
OSV
added 2021/11/23 10:15 p.m.5 views

UBUNTU-CVE-2021-38001

Type confusion in V8 in Google Chrome prior to 95.0.4638.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.26703EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
added 2021/11/23 12:0 a.m.11 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

10CVSS8AI score0.00912EPSS
SaveExploits0References9Affected Software5
CNNVD
CNNVD
added 2021/11/15 12:0 a.m.8 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google chrome caused by a type obfuscation in V8. A remote attacker could exploit the vulnerability to execute arbitrary code on the system...

8.8CVSS8.9AI score0.00912EPSS
SaveExploits0References13
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:0 a.m.16 views

Google Chromium V8 Improper Input Validation Vulnerability

Google Chromium V8 Engine contains an improper input validation vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome,...

8.8CVSS8.8AI score0.69291EPSS
SaveIn wildExploits6
Rows per page
Query Builder