Lucene search
K

755 matches found

NVD
NVD
added 2023/11/29 12:15 p.m.19 views

CVE-2023-6346

Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.0097EPSS
Exploits0References7
OSV
OSV
added 2023/11/29 12:15 p.m.23 views

CVE-2023-6346

Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.1AI score
Exploits0References7
Prion
Prion
added 2023/11/29 12:15 p.m.22 views

Design/Logic Flaw

Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

6.8CVSS7.1AI score0.0097EPSS
Exploits0References7Affected Software3
UbuntuCve
UbuntuCve
added 2023/11/29 12:15 p.m.30 views

CVE-2023-6346

Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.2AI score0.0097EPSS
Exploits0References6
Cvelist
Cvelist
added 2023/11/29 12:2 p.m.21 views

CVE-2023-6346

Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

9.4AI score0.0097EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2023/11/29 12:2 p.m.46 views

CVE-2023-6346

Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.4AI score0.0097EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2023/11/29 12:2 p.m.34 views

CVE-2023-6346

Use after free in WebAudio in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.3AI score0.0097EPSS
Exploits0
CVE
CVE
added 2023/11/29 12:2 p.m.208 views

CVE-2023-6346

CVE-2023-6346 is a use-after-free in WebAudio within Chromium-based browsers, enabling potential heap corruption. The vulnerability affects Chromium and derivatives (e.g., Google Chrome) prior to version 119.0.6045.199. Multiple connected advisories confirm the fix in version 119.0.6045.199 or ne...

8.8CVSS9AI score0.0097EPSS
Exploits0References7Affected Software1
CNNVD
CNNVD
added 2023/11/29 12:0 a.m.9 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome version 119.0.6045.199 and prior versions, which stems from a post-release reuse issue in the WebAudio module...

8.8CVSS6.6AI score0.0097EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2023/11/29 12:0 a.m.28 views

Fedora 38 : chromium (2023-4e555aedeb)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-4e555aedeb advisory. update to 119.0.6045.199, upstream security release High CVE-2023-6345: Integer overflow in Skia High CVE-2023-6347: Use after free in Mojo High...

9.6CVSS8.8AI score0.1963EPSS
Exploits0References6
Tenable Nessus
Tenable Nessus
added 2023/11/28 12:0 a.m.45 views

Google Chrome < 119.0.6045.199 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 119.0.6045.199. It is, therefore, affected by multiple vulnerabilities as referenced in the 202311stable-channel-update-for-desktop28 advisory. - Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed...

9.6CVSS8.8AI score0.1963EPSS
Exploits0References13
FreeBSD
FreeBSD
added 2023/11/28 12:0 a.m.46 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 7 security fixes: 1491459 High CVE-2023-6348: Type Confusion in Spellcheck. Reported by Mark Brand of Google Project Zero on 2023-10-10 1494461 High CVE-2023-6347: Use after free in Mojo. Reported by Leecraso and Guang Gong of 360 Vulnerability Resear...

9.6CVSS7.9AI score0.1963EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/11/16 12:0 a.m.32 views

FreeBSD : electron{25,26} -- use after free in WebAudio (a30f1a12-117f-4dac-a1d0-d65eaf084953)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the a30f1a12-117f-4dac-a1d0-d65eaf084953 advisory. - Use after free in WebAudio in Google Chrome prior to 119.0.6045.123 allowed a remote attacker to...

8.8CVSS8.2AI score0.01976EPSS
Exploits0References3
FreeBSD
FreeBSD
added 2023/11/15 12:0 a.m.30 views

electron{25,26} -- use after free in WebAudio

Electron developers report: This update fixes the following vulnerability: Security: backported fix for CVE-2023-5996...

8.8CVSS7.1AI score0.01976EPSS
Exploits0References1
OSV
OSV
added 2023/11/14 3:14 p.m.12 views

OPENSUSE-SU-2023:0368-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 119.0.6045.123 boo1216978 CVE-2023-5996: Use after free in WebAudio Chromium 119.0.6045.105 boo1216783 CVE-2023-5480: Inappropriate implementation in Payments CVE-2023-5482: Insufficient data validation in USB CVE-2023-5849: Integer...

8.8CVSS9.5AI score0.07094EPSS
Exploits0References17
BDU FSTEC
BDU FSTEC
added 2023/11/14 12:0 a.m.1 views

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the WebAudio component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

10CVSS8.1AI score0.01976EPSS
Exploits0References11Affected Software5
OpenVAS
OpenVAS
added 2023/11/10 12:0 a.m.22 views

Debian: Security Advisory (DSA-5551-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS8.8AI score0.01976EPSS
Exploits0References4
Microsoft CVE
Microsoft CVE
added 2023/11/09 10:35 p.m.35 views

Chromium: CVE-2023-5996 Use after free in WebAudio

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.01976EPSS
Exploits0
Veracode
Veracode
added 2023/11/09 2:10 a.m.38 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the WebAudio component in the library, which allows an attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7AI score0.01976EPSS
Exploits0References9Affected Software3
OpenVAS
OpenVAS
added 2023/11/09 12:0 a.m.26 views

Google Chrome Security Update (stable-channel-update-for-desktop-2023-11) - Mac OS X

Google Chrome is prone to an Use-after-free vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

8.8CVSS8.6AI score0.01976EPSS
Exploits0References1
Rows per page
Query Builder