RLSA-2023:4063 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.13.0. Security Fixes: Mozilla: Use-after-free in WebRTC certificate generation CVE-2023-37201 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey CVE-2023-37202...

FreeBSD : electron25 -- multiple vulnerabilities (5999fc39-72d0-4b99-851c-ade7ff7125c3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5999fc39-72d0-4b99-851c-ade7ff7125c3 advisory. - Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Aug 2023)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Chromium: CVE-2023-4076 Use after free in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

FreeBSD : electron{22,23,24,25} -- multiple vulnerabilities (f3a35fb8-2d70-47c9-a516-6aad7eb222b1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f3a35fb8-2d70-47c9-a516-6aad7eb222b1 advisory. - Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker t...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the WebRTC of the library, which allows an attacker to perform a sandbox escape via a maliciously crafted HTML page through the renderer process...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in lack of validate WebRTC connection over HTTPS, which can result in Denial of Service...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the WebRTC, allowing an attacker to cause heap corruption via a crafted WebRTC session...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the WebRTC, which allows an attacker to cause heap corruption via a maliciously crafted HTML page...

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the WebRTC, which allows an attacker to cause heap corruption via a maliciously crafted HTML page...

Google Chrome Code Execution Vulnerability (CNVD-2023-63470)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is due to free usage in WebRTC. An attacker can exploit the vulnerability to execute arbitrary code on a system or cause an application to crash...

SUSE CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

DEBIAN-CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

Design/Logic Flaw

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

CVE-2023-4076

CVE-2023-4076 is a use-after-free in WebRTC in Google Chrome/Chromium, leading to potential heap corruption. Public details in connected sources confirm the vulnerability affects Chrome/Chromium prior to version 115.0.5790.170, with the Debian/FreeBSD/Fedora advisories noting fixes in 115.0.5790....

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...