Lucene search
+L

735 matches found

OSV
OSV
added 2023/08/03 1:15 a.m.1 views

DEBIAN-CVE-2023-4068

Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. Chromium security severity: High...

8.1CVSS6.7AI score0.15475EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2023/08/02 12:0 a.m.16 views

PT-2023-4108 · Google +3 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.170 Description: The issue is related to a type confusion in the V8 JavaScript engine, which can potentially allow a remote attacker to exploit heap corruption via a crafted HTML page. This can lead ...

10CVSS7.3AI score0.99735EPSS
Exploits131References1181
Positive Technologies
Positive Technologies
added 2023/08/02 12:0 a.m.6 views

PT-2023-4107 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.170 Description: The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to perform arbitrary read/write operations via a crafted HTML page. This could...

10CVSS6.8AI score0.99735EPSS
Exploits131References1169
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.16 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted HTML page...

10CVSS8AI score0.23855EPSS
Exploits1References9Affected Software4
BDU FSTEC
BDU FSTEC
added 2023/07/20 12:0 a.m.8 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted HTML page...

10CVSS8AI score0.23022EPSS
Exploits1References8Affected Software4
OSV
OSV
added 2023/06/26 9:15 p.m.1 views

DEBIAN-CVE-2023-3420

Type Confusion in V8 in Google Chrome prior to 114.0.5735.198 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.5AI score0.56192EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/06/26 12:0 a.m.7 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. A security vulnerability exists in Google Chrome V8 prior to version 114.0.5735.198, which stems from a type obfuscation allowing remote attackers to cause heap corruption via specially crafted HTML...

8.8CVSS8.6AI score0.56192EPSS
Exploits0References10
OSV
OSV
added 2023/06/13 6:15 p.m.5 views

DEBIAN-CVE-2023-3216

Type confusion in V8 in Google Chrome prior to 114.0.5735.133 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.2AI score0.00938EPSS
Exploits0References1
CNNVD
CNNVD
added 2023/06/13 12:0 a.m.5 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome V8, which is caused due to type obfuscation in the V8 component, and can be exploited by an attacker to execute arbitrary code on a system or cause an application to crash...

8.8CVSS7.9AI score0.00938EPSS
Exploits0References9
Positive Technologies
Positive Technologies
added 2023/06/13 12:0 a.m.5 views

PT-2023-3629 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.133 Description: The issue is related to a type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker could potentially exploit this issue via a crafted HTML pag...

10CVSS6.7AI score0.99735EPSS
Exploits131References1118
Vulnrichment
Vulnrichment
added 2023/06/05 9:40 p.m.13 views

CVE-2023-3079

Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

6.8AI score0.32724EPSS
Exploits2References10
OSV
OSV
added 2023/05/30 10:15 p.m.1 views

DEBIAN-CVE-2023-2936

Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.2AI score0.23022EPSS
Exploits1References1
Prion
Prion
added 2023/05/16 7:15 p.m.22 views

Type confusion

Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

6.8CVSS8.4AI score0.29136EPSS
Exploits1References8Affected Software3
Vulnrichment
Vulnrichment
added 2023/05/16 6:45 p.m.6 views

CVE-2023-2724

Type confusion in V8 in Google Chrome prior to 113.0.5672.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.6AI score0.29136EPSS
Exploits1References8
OpenVAS
OpenVAS
added 2023/04/20 12:0 a.m.20 views

Microsoft Edge (Chromium-Based) Type Confusion Vulnerability (Apr 2023)

Microsoft Edge Chromium-Based is prone to a type confusion vulnerability SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS9.5AI score0.40798EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:37 a.m.2 views

SUSE CVE-2013-2919

Google V8, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service memory corruption or possibly have unspecified other impact via unknown vectors...

7.5CVSS9.5AI score0.01684EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 5:30 a.m.4 views

SUSE CVE-2014-1716

Cross-site scripting XSS vulnerability in the RuntimeSetPrototype function in runtime.cc in Google V8, as used in Google Chrome before 34.0.1847.116, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka "Universal XSS UXSS."...

7.5CVSS7.7AI score0.01934EPSS
Exploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:30 a.m.3 views

SUSE CVE-2014-1730

Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, does not properly store internationalization metadata, which allows remote attackers to bypass intended access restrictions by leveraging "type confusion" and reading property values,...

7.8CVSS9.1AI score0.03226EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:29 a.m.3 views

SUSE CVE-2014-3176

Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3177...

10CVSS9.7AI score0.09758EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 5:29 a.m.5 views

SUSE CVE-2014-3177

Google Chrome before 37.0.2062.94 does not properly handle the interaction of extensions, IPC, the sync API, and Google V8, which allows remote attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2014-3176...

10CVSS9.7AI score0.03883EPSS
Exploits0References4
Rows per page
Query Builder