4354 matches found
vm2 os dns Module Data Compromise
The vulnerability of the os and dns modules in the vm2 package manager NPM is related to errors in information processing. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...
vm2 Library VM Component Data Compromise
The vulnerability of the new VM component in the vm2 library of the NPM package manager is related to a breach of data protection mechanisms. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...
ROS-20260922-73-0096
The vulnerability of the tbxdppropertiesrequest function in the drivers/thunderbolt/xdomain.c file of the general support driver for USB4 and Thunderbolt in the Linux operating system is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could...
New Android malware uses AI to steal bank logins and PINs
Researchers at Zimperium's zLabs have analyzed an Android Trojan that uses an automated, multi-stage infection process. What’s new is that RatHat gives a live AI assistant the keys to the accessibility tree of the infected device and uses it to determine where to tap or scroll, rather than...
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
Cybersecurity researchers have flagged a new Android malware called RatHat that's assessed to be operated by China-based threat actors and features an artificial intelligence AI-powered system to navigate and control compromised devices. "Distributed primarily via targeted smishing SMS/text...
ROS-20260918-73-0023
The vulnerability in the drivers/net/wireless/broadcom/brcm80211/brcmfmac/fweh.c module of Broadcom’s wireless adapter driver for the Linux operating system is related to an improper check of a specified index, position, or offset in the input data. Exploiting this vulnerability could allow an...
FreeBSD execve Data Compromise
The vulnerability of the execve system call in FreeBSD operating systems is related to improper verification of removed users. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information...
PackageKit RepoRemove() Data Compromise
The vulnerability of the RepoRemove function in the PackageKit package manager is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity and accessibility of the protected information...
Tesseract OCR Deserialize Data Compromise
The vulnerability of the FullyConnected::De serialize function in the Tesseract OCR system is related to reading data beyond the allowable range in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and accessibility of the protected information...
Chromium CVE-2026-87562: Incorrect reference resolution in Accessibility
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
ROS-20260915-73-0009
The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge is related to improper code generation. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise data integrity...
ROS-20260915-73-0167
The vulnerability of the Accessibility component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to gain access to confidential data and compromise its integrity through a specially created HTML pag...
Astra Linux – Vulnerability in Firefox and Thunderbird
An attacker could exploit a “use-after-free” condition when accessibility is enabled, resulting in a potentially exploitable crash. This vulnerability affects Firefox 132, Firefox ESR 128.4, Firefox ESR 115.17, Thunderbird 128.4, and Thunderbird 132...
Astra Linux – Vulnerability in Chromium
Inappropriate implementation in Accessibility in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
Before version 99.0.4844.51, using Accessibility in Google Chrome allowed a remote attacker who convinced a user to perform certain UI gestures to execute arbitrary read/write operations through a crafted HTML page. Chromium security severity: Low...
Astra Linux – Vulnerability in Chromium
Before version 122.0.6261.57, using Accessibility in Google Chrome allowed a remote attacker who convinced a user to perform certain UI gestures to potentially exploit heap corruption through those gestures. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
Before version 97.0.4692.71, using Free after PDF accessibility in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...
Astra Linux – Vulnerability in Chromium
The use of “after free” in Accessibility in Google Chrome before version 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
The use of “after free” in Accessibility in Google Chrome before version 122.0.6261.57 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through specific UI gestures. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
In accessibility settings within Google Chrome, before version 112.0.5615.49, it was possible for a remote attacker to perform an out-of-bounds memory read through a crafted HTML page. Chromium security severity: Medium...