Heap overflow

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

CVE-2022-23731

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

PT-2022-16236

Name of the Vulnerable Software and Affected Versions webOS TV affected versions not specified Description The V8 javascript engine contains a heap vulnerability that can cause privilege escalation, potentially impacting some webOS TV models. Recommendations At the moment, there is no information...

CVE-2022-23731: Undefined Security Weakness

V8 javascript engine heap vulnerability can cause privilege escalation ,which can impact on some webOS TV models...

PT-2022-1591

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 98.0.4758.80 Description The issue is related to an out of bounds memory access in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This...

PT-2022-1844

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 97.0.4692.71 Microsoft Edge affected versions not specified Description The issue is related to a type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can potentially...

PT-2021-5653

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.93 Description The issue is related to type confusion in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This could potential...

Nodebb licensing issue vulnerability

NodeBB is a forum system built by the Design Create Play team using Node.js, a web application platform built on top of Google's V8 JavaScript engine. an authorization issue vulnerability exists in Nodebb, which stems from a faulty token authentication logic in the product, and could be exploited...

Nodebb path traversal vulnerability

NodeBB is a forum system built by the Design Create Play team using Node.js, a web application platform built on top of Google's V8 JavaScript engine. Nodebb is vulnerable to a path traversal vulnerability that could be exploited to access locations outside of restricted directories...

PT-2021-6783

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 100.0.4896.88 Description The issue is related to type confusion in the V8 JavaScript engine of Google Chrome, which can lead to heap corruption. A remote attacker could potentially exploit this issue by using a...

PT-2021-4862

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.45 Description The issue is related to a type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a crafted HTML page,...

PT-2021-5596

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 96.0.4664.45 Description The issue is related to a type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a crafted HTML page,...

PT-2021-5626

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 95.0.4638.54 Description The issue is related to a use after free in the V8 JavaScript engine, which can lead to heap corruption. This can be exploited by a remote attacker who has convinced a user to allow a...

Google Chrome Resource Management Error Vulnerability

Chrome is a web browsing tool developed by Google. a post-release reuse vulnerability exists in V8 in versions prior to Google Chrome 95.0.4638.54. An attacker could exploit the vulnerability to exploit heap corruption via a crafted HTML page...

PT-2021-4786

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 95.0.4638.69 Description The issue is related to type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker could potentially exploit this by using a specially crafted HTML...

Google Emergency Update Fixes Two Chrome Zero Days

Google has pushed out an emergency Chrome update to fix yet another pair of zero days – the second pair this month – that are being exploited in the wild. This hoists this year’s total number of zero days found in the browser up to a dozen. “Google is aware the exploits for CVE-2021-37975 and...

Edge’s Super Duper Secure Mode benchmarked: How much speed would you trade for security?

In an attempt to make Edge more secure, the Microsoft Vulnerability Research team has started to experiment with disabling Just-In-Time JIT compilation in the browsers V8 JavaScript engine, to create what its calling Super Duper Secure Mode. The reasoning behind this experiment sounds valid. A...

PT-2021-3873

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.159 Description The issue is related to a type confusion in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker to execute arbitrary code inside a sandbox. This can b...

PT-2021-3678

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 92.0.4515.107 Description The issue is related to a type confusion in the V8 JavaScript engine of Google Chrome, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a...

PT-2021-3703

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 91.0.4472.164 Description The issue is related to a use after free in the V8 JavaScript engine of Google Chrome, which can lead to heap corruption. A remote attacker could potentially exploit this issue by using...