Lucene search
K

593 matches found

Kaspersky
Kaspersky
added 2025/11/05 12:0 a.m.5 views

KLA89898 DoS vulnerabilities in Google Chrome

Denial of service vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Omnibox can be exploited to cause denial of service. 2. Implementation...

8.8CVSS6.7AI score0.00238EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.2 views

Google Chrome < 142.0.7444.135 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 142.0.7444.135. It is, therefore, affected by multiple vulnerabilities as referenced in the 202511stable-channel-update-for-desktop advisory. - Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137...

8.8CVSS5.9AI score0.00238EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2025/11/05 12:0 a.m.3 views

Google Chrome < 142.0.7444.134 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 142.0.7444.134. It is, therefore, affected by multiple vulnerabilities as referenced in the 202511stable-channel-update-for-desktop advisory. - Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.137...

8.8CVSS5.9AI score0.00238EPSS
Exploits0References11
FreeBSD
FreeBSD
added 2025/11/05 12:0 a.m.5 views

chromium -- multiple security fixes

Chrome Releases reports: This update includes 5 security fixes: 443906252 High CVE-2025-12725: Out of bounds write in WebGPU. Reported by Anonymous on 2025-09-09 447172715 High CVE-2025-12726: Inappropriate implementation in Views. Reported by Alesandro Ortiz on 2025-09-25 454485895 High...

8.8CVSS7.1AI score0.00238EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/31 2:13 p.m.2 views

CVE-2025-12380

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2...

9.8CVSS7.3AI score0.00281EPSS
Exploits0References1
NCSC
NCSC
added 2025/10/31 9:31 a.m.4 views

Vulnerability fixed in Mozilla Firefox

Mozilla has fixed a vulnerability in Firefox Specific for versions before 144.0.2 The vulnerability is in how a compromised child process can exploit a use-after-free issue in the GPU or browser process via WebGPU-related IPC calls. This can lead to a sandbox escape, which compromises the browser...

9.8CVSS7.7AI score0.00281EPSS
Exploits0References1
CNVD
CNVD
added 2025/10/31 12:0 a.m.4 views

Mozilla Firefox Code Execution Vulnerability (CNVD-2025-26886)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. Mozilla Firefox suffers from a code execution vulnerability that is caused by the use of a WebGPU internal release triggered by an infected child process. An attacker could exploit the vulnerability to...

9.8CVSS7.9AI score0.00281EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/10/31 12:0 a.m.3 views

FreeBSD : Firefox -- use-after-free in the GPU or browser process (291773e6-b5b2-11f0-8f61-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 291773e6-b5b2-11f0-8f61-b42e991fc52e advisory. https://bugzilla.mozilla.org/showbug.cgi?id=1993113 reports: Starting with Firefox 142, it was possible...

9.8CVSS5.5AI score0.00281EPSS
Exploits0References3
SUSE CVE
SUSE CVE
added 2025/10/30 12:30 a.m.1 views

SUSE CVE-2025-12380

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2...

8.8CVSS7.3AI score0.00281EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2025/10/30 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-12380

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC...

9.8CVSS7.3AI score0.00281EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2025/10/29 12:0 a.m.4 views

Mozilla Firefox Security Advisory (MFSA2025-86) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2025-86. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

9.8CVSS6.5AI score0.00281EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/28 3:30 p.m.4 views

EUVD-2025-36530

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability affects Firefox 144.0.2...

5.8AI score0.00281EPSS
Exploits0References3
OSV
OSV
added 2025/10/28 2:15 p.m.2 views

CVE-2025-12380

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability affects Firefox 144.0.2...

9.8CVSS5.8AI score0.00281EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2025/10/28 2:15 p.m.5 views

CVE-2025-12380

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability affects Firefox 144.0.2...

9.8CVSS6.4AI score0.00281EPSS
Exploits0References2
NVD
NVD
added 2025/10/28 2:15 p.m.4 views

CVE-2025-12380

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2...

9.8CVSS0.00281EPSS
Exploits0References2
OSV
OSV
added 2025/10/28 2:15 p.m.0 views

UBUNTU-CVE-2025-12380

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability affects Firefox 144.0.2...

9.8CVSS5.8AI score0.00281EPSS
Exploits0References5
CVE
CVE
added 2025/10/28 2:6 p.m.45 views

CVE-2025-12380

Mozilla Firefox is affected by CVE-2025-12380: starting with Firefox 142, a compromised child process could trigger a use-after-free in the GPU or browser process via WebGPU IPC calls, potentially escaping the sandbox and achieving arbitrary code execution. Affected versions are Firefox 142.x up ...

9.8CVSS7.3AI score0.00281EPSS
Exploits0References2Affected Software1
ATTACKERKB
ATTACKERKB
added 2025/10/28 2:6 p.m.4 views

CVE-2025-12380

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2...

9.8CVSS7.3AI score0.00281EPSS
Exploits0References3
Cvelist
Cvelist
added 2025/10/28 2:6 p.m.5 views

CVE-2025-12380 Use-after-free in WebGPU internals triggered from a compromised child process

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2...

0.00281EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/10/28 2:6 p.m.1 views

CVE-2025-12380 Use-after-free in WebGPU internals triggered from a compromised child process

Starting with Firefox 142, it was possible for a compromised child process to trigger a use-after-free in the GPU or browser process using WebGPU-related IPC calls. This may have been usable to escape the child process sandbox. This vulnerability was fixed in Firefox 144.0.2...

7.3AI score0.00281EPSS
Exploits0References2
Rows per page
Query Builder