Stable Channel Update for Desktop

The Stable channel has been updated to 103.0.5060.114 for Windows. which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Interested in switching release channels? Find out how here. If you find a new issue, please let us know by filing a bug...

PT-2022-3420

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 103.0.5060.114 Description A heap buffer overflow issue in WebRTC allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This issue affects web browsers that use WebRTC, includi...

KLA12578 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type Confusion vulnerability in V8 can be exploited to cause denial of service. 2. Heap buffe...

VulnCheck KEV: CVE-2022-2294

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

Malicious code in amazon-kinesis-video-streams-webrtc-sdk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a41c304fc95ca7e20537b9ac25674c0c7e230f44bf650764c923be4cfdf37cf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-955 Malicious code in amazon-kinesis-video-streams-webrtc-sdk-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a41c304fc95ca7e20537b9ac25674c0c7e230f44bf650764c923be4cfdf37cf3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

new packages: webrtc-audio-processing

An update is available for webrtc-audio-processing. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

webrtc-audio-processing bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

webrtc-audio-processing bug fix and enhancement update

An update is available for webrtc-audio-processing. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the...

ALBA-2022:1918 webrtc-audio-processing bug fix and enhancement update

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...

Use-After-Free

chromium is vulnerable to use-after-free. The vulnerability is possible because of a flaw in the WebRTC component, leading to use-after-free...

Chromium: CVE-2022-1133 Use after free in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA12495 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Portals can be...

CVE-2022-23228

Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service...

CVE-2022-23228

Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service...

Input validation

Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service...

CVE-2022-23228

Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service...

CVE-2022-23228

CVE-2022-23228 affects Pexip Infinity prior to 27.0. The issue is improper WebRTC input validation, enabling an unauthenticated remote attacker to exhaust resources and temporarily cause a denial-of-service condition. The description does not provide any exploitation details beyond this impact, n...

PT-2022-15908

Name of the Vulnerable Software and Affected Versions Pexip Infinity versions prior to 27.0 Description The issue is related to improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service. Recommendations For versions pri...

CVE-2022-23228: Allocation of Resources Without Limits or Throttling

Pexip Infinity before 27.0 has improper WebRTC input validation. An unauthenticated remote attacker can use excessive resources, temporarily causing denial of service...