109 matches found
Microsoft Excel Spoofing
Title: Microsoft Excel Spoofing Vulnerability Author: nu11secur1ty Date: 04.06.2023 Vendor: https://www.microsoft.com/ Software: https://www.microsoft.com/en-us/microsoft-365/excel Reference: https://www.rapid7.com/fundamentals/spoofing-attacks/ CVE-2023-23398 Description: The attack itself is...
Qt Resource Management Confidential Data Compromise
The vulnerability of the cross-platform software development framework Qt is related to resource management errors. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures through a specially created web page...
Assistant web Google Chrome Disclosure Information Disclosure
The vulnerability of the Assistant web browser component of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information through a specially created web page...
Media components Google Chrome Microsoft Edge Code Execution
The vulnerability of the Media component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...
Mozilla Firefox ESR Buffer Overflow
The vulnerability in Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird relates to the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...
Mozilla Firefox ESR Memory Use After Free
The vulnerability of Mozilla Firefox ESR and the Thunderbird email client relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...
Fullscreen API Disclosure Protected Information
The vulnerability of the Fullscreen API implementation in Google Chrome and Microsoft Edge is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created w...
DEBIAN-CVE-2022-2612
Side-channel information leakage in Keyboard input in Google Chrome prior to 104.0.5112.79 allowed a remote attacker who had compromised the renderer process to obtain potentially sensitive information from process memory via a crafted HTML page...
Google Chrome Memory Use After Free Info Disclosure
The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially created web page...
Google Chrome ANGLE Component Memory Misreference Vulnerability
Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in the ANGLE component of Google Chrome versions prior to 102.0.5005.61, which stems from a confusion in the instructions responsible for freeing memory in the ANGLE component program. An...
Elcomplus SmartPPT SCADA CSRF
The vulnerability of the Elcomplus SmartPPT SCADA server is related to insufficient security checks on the HTTP request source. Exploiting this vulnerability allows a malicious actor to execute a CSRF attack using a specially created web page...
Google Chrome Storage Code Execution
The vulnerability of Google Chrome’s storage mechanism is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially created web page...
Shopping Cart Component Unauthorized Access
The vulnerability of the Shopping Cart component in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created web page...
Google Chrome Microsoft Edge Unauthorized Access
The vulnerability of the Background Fetch API programming interface in Google Chrome and Microsoft Edge browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected...
Microsoft Edge Privilege Escalation
The vulnerability of Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created web page...
Microsoft Edge Privilege Escalation
The vulnerability of Microsoft Edge is related to improper handling of code generation. Exploiting this vulnerability allows a malicious actor to enhance their privileges through a specially created web page...
Data Compromise component Google Chrome
The vulnerability of the Accessibility component in Google Chrome browser relates to memory usage after deallocation. Exploiting this vulnerability could allow an attacker to access confidential information through a specially created web page...
JavaScript script handlers Microsoft Edge Chrome Code Execution
The vulnerability of JavaScript script handlers in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code or cause a denial-of-service attack through a specially created web...
Windows Script Handler RCE
The vulnerability of Windows operating system script handlers is related to the operation of writing data beyond the buffer boundaries into memory when processing HTML content. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure through a...
Google Chrome Media Component RCE
The vulnerability of the Google Chrome browser’s media component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created web page...