Lucene search
+L

735 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2022/06/08 12:0 a.m.53 views

Google Chromium V8 Memory Corruption Vulnerability

Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera...

8.8CVSS8.6AI score0.41603EPSS
In wildExploits1
RedhatCVE
RedhatCVE
added 2022/05/20 11:19 p.m.47 views

CVE-2021-37975

Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS2.9AI score0.34887EPSS
Exploits0References1
NVD
NVD
added 2022/05/01 4:15 p.m.33 views

CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

7.5CVSS0.02068EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2022/05/01 4:15 p.m.29 views

CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

7.5CVSS7.1AI score0.02068EPSS
Exploits0References6
Cvelist
Cvelist
added 2022/05/01 3:25 p.m.53 views

CVE-2022-21227 Denial of Service (DoS)

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

7.5CVSS7.6AI score0.02068EPSS
Exploits0References3
OSV
OSV
added 2022/05/01 3:25 p.m.26 views

CVE-2022-21227 Denial of Service (DoS)

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

7.5CVSS7.1AI score0.02068EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2022/05/01 3:20 p.m.7 views

CVE-2022-21227

The package sqlite3 before 5.0.3 are vulnerable to Denial of Service DoS which will invoke the toString function of the passed parameter. If passed an invalid Function object it will throw and crash the V8 engine...

7.5CVSS7.1AI score0.02068EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2022/05/01 12:0 a.m.16 views

PT-2022-14877 · Npm · Libxmljs

Name of the Vulnerable Software and Affected Versions: libxmljs versions all Description: The issue arises when the libxmljs.parseXml function is invoked with a non-buffer argument. In such cases, the V8 code attempts to call the toString method of the argument. If the argument's toString value i...

7.5CVSS7.4AI score0.01888EPSS
Exploits1References9
CNNVD
CNNVD
added 2022/04/14 12:0 a.m.2 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. A security vulnerability exists in Google Chrome V8 that stems from type confusion...

8.8CVSS8.4AI score0.1372EPSS
Exploits2References13
CNNVD
CNNVD
added 2022/04/11 12:0 a.m.6 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. Google Chrome suffers from a resource management error vulnerability that stems from the presence of post-release reuse in regular expressions...

8.8CVSS7.5AI score0.00898EPSS
Exploits1References9
Trellix
Trellix
added 2022/04/06 12:0 a.m.43 views

The Bug Report - March 2022 Edition

The Bug Report - March 2022 By Charles McFarland · April 6, 2022 Your Cybersecurity Comic Relief Comic from https://geek-and-poke.com/ and remains unedited. https://creativecommons.org/licenses/by/3.0/ Use of this comic does not indicate endorsement by the creator. Why am I here? Welcome back the...

9AI score0.9967EPSS
Exploits112
ThreatPost
ThreatPost
added 2022/03/30 4:14 p.m.194 views

Google Chrome Bug Actively Exploited as Zero-Day

Google has updated its Stable channel for the desktop version of Chrome, to address a zero-day security vulnerability that’s being actively exploited in the wild. The bug, tracked as CVE-2022-1096, is a type-confusion issue in the V8 JavaScript engine, which is an open-source engine used by Chrom...

9.6CVSS9.6AI score0.71536EPSS
Exploits9References12
CISA KEV Catalog
CISA KEV Catalog
added 2022/03/28 12:0 a.m.32 views

Google Chromium V8 Type Confusion Vulnerability

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge...

8.8CVSS8.8AI score0.24237EPSS
In wildExploits1
VulnCheck KEV
VulnCheck KEV
added 2022/03/23 12:0 a.m.1 views

VulnCheck KEV: CVE-2022-1096

Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft...

8.8CVSS7.5AI score0.24237EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/03/11 12:0 a.m.5 views

Lg Electronics Lg WebOs 安全漏洞

Lg Electronics Lg WebOs is a Linux kernel-based smart TV operating system from Lg Electronics, a South Korean company. A security vulnerability exists in Lg Electronics Lg WebOs that originates from a local elevation of privilege via a V8 engine vulnerability heap vulnerability...

7.8CVSS7.3AI score0.00617EPSS
Exploits1References2
OSV
OSV
added 2022/02/12 12:15 a.m.6 views

CVE-2022-0102

Type confusion in V8 in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.1AI score
Exploits0References5
OSV
OSV
added 2022/02/11 11:15 p.m.1 views

UBUNTU-CVE-2021-4102

Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.07836EPSS
Exploits0References3
hivepro
hivepro
added 2022/02/11 7:15 a.m.16 views

Google Chrome affected by high severity vulnerabilities

THREAT LEVEL: Green. For a detailed advisory, download the pdf file here Google has released Chrome 98 as a stable channel for Windows, Mac, and Linux. This update addresses 19 security vulnerabilities. Eight of them are rated severity high, ten of them are medium and one of them is of severity...

0.8AI score
Exploits0
Veracode
Veracode
added 2022/01/20 6:21 a.m.16 views

Denial Of Service (DoS)

chromium-browser is vulnerable to denial of service. The vulnerability exists due to the type confusion in V8 engine in google chrome, which allows an attacker to crash the application via a crafted HTML page...

8.8CVSS2.1AI score0.01387EPSS
Exploits0References7Affected Software2
Check Point Advisories
Check Point Advisories
added 2022/01/17 12:0 a.m.25 views

Google Chromium V8 Engine Use-After-Free (CVE-2021-4102)

A use-after-free vulnerability exists in Google Chromium V8 Engine. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS5.3AI score0.07836EPSS
Exploits0
Rows per page
Query Builder