Lucene search
K

77 matches found

Tenable Nessus
Tenable Nessus
added 2023/04/19 12:0 a.m.149 views

Google Chrome < 112.0.5615.137 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 112.0.5615.137. It is, therefore, affected by multiple vulnerabilities as referenced in the 202304stable-channel-update-for-desktop18 advisory. - Integer overflow in Skia in Google Chrome prior to 112.0.5615.137 allowed...

9.6CVSS8AI score0.00681EPSS
Exploits0References11
SUSE CVE
SUSE CVE
added 2023/02/15 3:32 a.m.1 views

SUSE CVE-2022-2480

Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.9AI score0.06824EPSS
Exploits0References6
OSV
OSV
added 2023/01/20 4:56 p.m.28 views

GHSA-MC52-JPM2-CQH6 Deno is vulnerable to race condition via interactive permission prompt spoofing

Impact Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the terminal screen after permission prompt was shown and write a generic message li...

8.8CVSS7.2AI score0.00336EPSS
Exploits1References4
NVD
NVD
added 2023/01/17 9:15 p.m.11 views

CVE-2023-22499

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the...

7.5CVSS7.4AI score0.00336EPSS
Exploits1References2
Prion
Prion
added 2023/01/17 9:15 p.m.17 views

Code injection

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the...

5.1CVSS7.4AI score0.00336EPSS
Exploits1References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/17 8:23 p.m.9 views

CVE-2023-22499 Interactive permission prompt spoofing in Deno

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the...

7.5CVSS7.6AI score0.00336EPSS
Exploits1References2
OSV
OSV
added 2023/01/17 8:23 p.m.23 views

CVE-2023-22499 Interactive permission prompt spoofing in Deno

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the...

7.5CVSS7.3AI score0.00336EPSS
Exploits1References4
Cvelist
Cvelist
added 2023/01/17 8:23 p.m.18 views

CVE-2023-22499 Interactive permission prompt spoofing in Deno

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Multi-threaded programs were able to spoof interactive permission prompt by rewriting the prompt to suggest that program is waiting on user confirmation to unrelated action. A malicious program could clear the...

7.5CVSS7.6AI score0.00336EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2023/01/17 12:0 a.m.4 views

PT-2023-1315 · Deno · Deno

Name of the Vulnerable Software and Affected Versions: Deno versions prior to 1.29.3 Description: The issue is related to errors in synchronization when using a shared resource in Deno, a runtime for JavaScript and TypeScript. This could allow a remote attacker to execute arbitrary code...

10CVSS7.5AI score0.00336EPSS
Exploits1References9
BDU FSTEC
BDU FSTEC
added 2022/08/29 12:0 a.m.4 views

The vulnerability of the Worker API service for Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the Worker API service for Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created website...

10CVSS8.1AI score0.06824EPSS
Exploits0References11Affected Software7
ATTACKERKB
ATTACKERKB
added 2022/07/28 2:15 a.m.2 views

CVE-2022-2480

Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.06824EPSS
Exploits0References9
NVD
NVD
added 2022/07/28 2:15 a.m.22 views

CVE-2022-2480

Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.06824EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2022/07/28 2:15 a.m.37 views

CVE-2022-2480

Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.06824EPSS
Exploits0References1
Cvelist
Cvelist
added 2022/07/28 12:0 a.m.26 views

CVE-2022-2480

Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

9.1AI score0.06824EPSS
Exploits0References6
Debian CVE
Debian CVE
added 2022/07/28 12:0 a.m.52 views

CVE-2022-2480

Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.5AI score0.06824EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2022/07/28 12:0 a.m.48 views

CVE-2022-2480

Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9AI score0.06824EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2022/07/23 12:0 a.m.135 views

Microsoft Edge (Chromium) < 103.0.1264.71 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 103.0.1264.71. It is, therefore, affected by multiple vulnerabilities as referenced in the July 22, 2022 advisory. - : Use after free in Guest View. CVE-2022-2477 - : Use after free in PDF. CVE-2022-2478 - : Insufficie...

8.8CVSS7AI score0.06824EPSS
Exploits0References11
Microsoft CVE
Microsoft CVE
added 2022/07/22 7:0 a.m.72 views

Chromium: CVE-2022-2480 Use after free in Service Worker API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.06824EPSS
Exploits0
Veracode
Veracode
added 2022/07/21 9:43 a.m.179 views

Use-After-Free

chromium is vulnerable to use-after-free. The vulnerability is possible because of a flaw in the Service Worker API component, which leads to heap use-after-free...

8.8CVSS8.3AI score0.06824EPSS
Exploits0References9Affected Software2
Tenable Nessus
Tenable Nessus
added 2022/07/20 12:0 a.m.41 views

FreeBSD : chromium -- multiple vulnerabilities (27cc4258-0805-11ed-8ac1-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 27cc4258-0805-11ed-8ac1-3065ec8fd3ec advisory. - Use after free in Cast UI and Toolbar. CVE-2022-2163 - : Use after free in Guest View...

8.8CVSS7AI score0.06824EPSS
Exploits0References8
Rows per page
Query Builder