Update now! Emergency fix for Google Chrome's V8 JavaScript engine zero-day flaw released

On Friday, December 2, Google rolled out an out-of-band patch for an actively exploited zero-day vulnerability in its V8 JavaScript engine. The flaw could allow attackers to cause a system crash or execute potentially malicious code. That means you'll want to update Chrome to patch against this...

Foxit Reader deletePages Field Calculate use-after-free vulnerability

Talos Vulnerability Report TALOS-2022-1600 Foxit Reader deletePages Field Calculate use-after-free vulnerability November 10, 2022 CVE Number CVE-2022-32774 SUMMARY A use-after-free vulnerability exists in the JavaScript engine of Foxit Software’s PDF Reader, version 12.0.1.12430. By prematurely...

PT-2022-5310

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 107.0.5304.62 Microsoft Edge affected versions not specified Description The issue is related to type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially exploit heap corruption via ...

PT-2022-5051

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 106.0.5249.91 Microsoft Edge affected versions not specified Description The issue is related to an out of bounds write in the V8 JavaScript engine, allowing a remote attacker to perform an out of bounds memory...

PT-2022-4578

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 105.0.5195.52 Microsoft Edge affected versions not specified Description The issue is related to insufficient validation of untrusted input in the V8 JavaScript engine, which can be exploited by a remote attacke...

UBUNTU-CVE-2022-1134

Type confusion in V8 in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Google Patches Actively Exploited Chrome Bug

While people were celebrating the Fourth of July holiday in the United States, Google quietly rolled out a stable channel update for Chrome to patch an actively exploited zero-day vulnerability, the fourth such flaw the vendor has had to patch in its browser product so far this year. Chrome 103...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. A security vulnerability exists in Google Chrome that stems from type obfuscation in V8...

Experts Detail New RCE Vulnerability Affecting Google Chrome Dev Channel

Details have emerged about a recently patched critical remote code execution vulnerability in the V8 JavaScript and WebAssembly engine used in Google Chrome and Chromium-based browsers. The issue relates to a case of use-after-free in the instruction optimization component, successful exploitatio...

PT-2022-2755

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 102.0.5005.61 Description The issue is related to a type confusion error in the V8 JavaScript engine of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This...

KLA12530 Multiple vulnerabilities in Foxit Reader

Multiple vulnerabilities were found in Foxit Reader. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information, cause denial of service. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability can be exploited remotely ...

Google Releases Urgent Chrome Update to Patch Actively Exploited Zero-Day Flaw

Google on Thursday shipped emergency patches to address two security issues in its Chrome web browser, one of which it says is being actively exploited in the wild. Tracked as CVE-2022-1364, the tech giant described the high-severity bug as a case of type confusion in the V8 JavaScript engine...

Security advisory: Recently reported Chromium "Type confusion" issue impacts Qt WebEngine

Google has recently reported that Chromium has a security issue - Type confusion in the V8 JavaScript engine - which is reported in a bit more detail here: https://chromereleases.googleblog.com/2022/03/stable-channel-update-for-desktop25.html. This has been assigned the CVE id CVE-2022-1096. This...

PT-2022-2721

Name of the Vulnerable Software and Affected Versions Google Chrome affected versions not specified Description The issue is related to a "zero-day" vulnerability in the V8 JavaScript engine handler of Google Chrome, which is associated with the use of memory after it has been freed. This could...

Heap overflow

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

CVE-2022-23731

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

PT-2022-16236

Name of the Vulnerable Software and Affected Versions webOS TV affected versions not specified Description The V8 javascript engine contains a heap vulnerability that can cause privilege escalation, potentially impacting some webOS TV models. Recommendations At the moment, there is no information...

CVE-2022-23731: Undefined Security Weakness

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

PT-2022-1591

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 98.0.4758.80 Description The issue is related to an out of bounds memory access in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This...

PT-2022-1844

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 97.0.4692.71 Microsoft Edge affected versions not specified Description The issue is related to a type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can potentially...