48297 matches found
thunderbird: firefox: Cross-process information leaked due to malicious IPC messages
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process...
thunderbird: firefox: An OBJECT tag type attribute overrode browser behavior on web resources without a content-type
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A malicious page could have used the type attribute of an OBJECT tag to override the default browser behavior when encountering a web resource served without a content-type. This...
thunderbird: firefox: Out of bounds read/write in a privileged process triggered by WebGL textures
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process was able to trigger out of bounds reads and writes in a more privileged process using manipulated WebGL textures...
thunderbird: firefox: Cross-process information leaked due to malicious IPC messages
A flaw was found in Thunderbird and Firefox. The Mozilla Foundation's Security Advisory describes the following issue: A compromised web process using malicious IPC messages could have caused the privileged browser process to reveal blocks of its memory to the compromised process...
Important: Red Hat Security Advisory: firefox security update
An update for firefox is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerabili...
CVE-2025-42886
Due to a Reflected Cross-Site Scripting XSS vulnerability in SAP Business Connector, an unauthenticated attacker could generate a malicious link and make it publicly accessible. If an authenticated victim accesses this link, the injected input is processed during web page generation, resulting in...
The vulnerability of the Safari browser on the macOS Sequoia operating system, related to incorrect handling of exception states, allows a hacker to trigger a service failure.
The vulnerability of the Safari browser on the macOS Sequoia operating system is related to incorrect handling of exception states. Exploiting this vulnerability can allow a remote attacker to cause a service failure...
PT-2025-46690
Name of the Vulnerable Software and Affected Versions Lenovo PC Manager affected versions not specified Lenovo App Store affected versions not specified Lenovo Browser affected versions not specified Lenovo Legion Zone affected versions not specified Description A potential security issue has bee...
CVE-2025-13042
Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.166 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
VulnCheck KEV: CVE-2025-13223
Google Chromium V8 contains a type confusion vulnerability that allows for heap corruption...
Vulnerability of the Omnibox component in Google Chrome and Microsoft Edge browsers; perform a substitution of the user interface
The vulnerability of the Omnibox component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace the user interface with a specially created HTML page...
Lenovo多款产品 安全漏洞
Lenovo App Store and others are products of the Chinese company Lenovo Lenovo.Lenovo App Store is a desktop application.Lenovo Browser is a browser.ws and others are WebSockets open source products.ws is a Node.js WebSocket library.Lenovo PC Lenovo PC Manager is a PC management software. A securi...
CVE-2025-63645
A stored cross-site scripting XSS vulnerability exists in pH7Software pH7-Social-Dating-CMS 17.9.1 in the application's message system. Unsanitized message content submitted by one user is persisted by the server and later rendered in another user's Inbox view without appropriate context-aware...
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers allows attackers to gain unauthorized access to protected information.
The vulnerability of JavaScript script handlers in Google Chrome and Microsoft Edge browsers is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Vulnerability of the Omnibox component in Google Chrome and Microsoft Edge browsers; perform a substitution of the user interface
The vulnerability of the Omnibox component in Google Chrome and Microsoft Edge is related to information representation errors in the user interface. Exploiting this vulnerability can allow an attacker to replace the user interface with a specially created HTML page...
PT-2025-46766
Name of the Vulnerable Software and Affected Versions File Browser versions prior to 2.45.1 Description File Browser provides a file managing interface for tasks like uploading, deleting, previewing, renaming, and editing files. An Insecure Direct Object Reference IDOR exists in the application's...
Vulnerability of the Storage component in Google Chrome and Microsoft Edge browsers; perform user interface replacement.
The vulnerability of the Storage component in Google Chrome and Microsoft Edge is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to replace the user interface with a specially created HTML page...
WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest Banks
Threat hunters have uncovered similarities between a banking malware called Coyote and a newly disclosed malicious program dubbed Maverick that has been propagated via WhatsApp. According to a report from CyberProof, both malware strains are written in .NET, target Brazilian users and banks, and...
CVE-2025-12036
Out of bounds memory access in V8 in Google Chrome prior to 141.0.7390.122 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...
CVE-2025-11215
Off by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: Medium...