Lucene search
+L

2689 matches found

OSV
OSV
added 2022/09/26 4:15 p.m.4 views

DEBIAN-CVE-2022-3055

Use after free in Passwords in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.00686EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/26 4:15 p.m.6 views

DEBIAN-CVE-2022-3049

Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.00563EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/26 4:15 p.m.5 views

DEBIAN-CVE-2022-3046

Use after free in Browser Tag in Google Chrome prior to 105.0.5195.52 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.00822EPSS
SaveExploits0References1
OSV
OSV
added 2022/09/26 4:15 p.m.7 views

UBUNTU-CVE-2022-3197

Use after free in PDF in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to potentially exploit heap corruption via a crafted PDF file. Chromium security severity: High...

8.8CVSS7.3AI score0.0087EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2022/09/14 12:00 a.m.5 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, an American company. An input validation error vulnerability exists in the DevTools component of Google Chrome versions prior to 105.0.5195.125. An attacker can exploit this vulnerability to convince users to install a malicious extension that bypasses...

5.4CVSS6.5AI score0.00631EPSS
SaveExploits0References14
BDU FSTEC
BDU FSTEC
added 2022/09/09 12:00 a.m.13 views

The vulnerability of the Dawn component in browsers Google Chrome and Microsoft Edge allows a hacker to disclose protected information.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose sensitive information through a specially created web page...

7.8CVSS6.9AI score0.0073EPSS
SaveExploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/09/05 12:00 a.m.16 views

The vulnerability of the Mojo library for Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code.

The vulnerability of the Mojo library for Microsoft Edge and Google Chrome browsers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.05759EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:00 a.m.10 views

The vulnerability of the WebSQL module in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of the WebSQL module in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8AI score0.00818EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:00 a.m.11 views

The vulnerability of the WebSQL module in Microsoft Edge and Google Chrome browsers allows attackers to execute arbitrary code.

The vulnerability of the WebSQL module in Microsoft Edge and Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8AI score0.00903EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:00 a.m.13 views

The vulnerability in the set of tools for web development, DevTools, in Microsoft Edge and Google Chrome browsers allows a hacker to bypass existing security restrictions.

The vulnerability of the DevTools suite for web development in Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to circumvent existing security restrictions remotely...

6.4CVSS6.7AI score0.00636EPSS
SaveExploits0References8Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:00 a.m.12 views

The vulnerability of the Sign-In component in Microsoft Edge and Google Chrome browsers allows a perpetrator to trigger a service failure.

The vulnerability of the Sign-In component in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

5CVSS7.5AI score0.00664EPSS
SaveExploits0References8Affected Software5
The Hacker News
The Hacker News
added 2022/08/31 10:45 a.m.91 views

Experts Find Malicious Cookie Stuffing Chrome Extensions Used by 1.4 Million Users

Five imposter extensions for the Google Chrome web browser masquerading as Netflix viewers and others have been found to track users' browsing activity and profit off retail affiliate programs. "The extensions offer various functions such as enabling users to watch Netflix shows together, website...

1.1AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2022/08/31 12:00 a.m.14 views

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Safe Browsing service in Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...

10CVSS8.1AI score0.00731EPSS
SaveExploits0References12Affected Software7
FreeBSD
FreeBSD
added 2022/08/30 12:00 a.m.189 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 24 security fixes, including: 1340253 Critical CVE-2022-3038: Use after free in Network Service. Reported by Sergei Glazunov of Google Project Zero on 2022-06-28 1343348 High CVE-2022-3039: Use after free in WebSQL. Reported by Nan Wang@eternalsakura...

8.8CVSS7.2AI score0.24738EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2022/08/29 12:00 a.m.13 views

Vulnerability of PDF-content handling browsers Google Chrome and Microsoft Edge, allowing attackers to execute arbitrary code

The vulnerability of PDF-content handling browsers like Google Chrome and Microsoft Edge is related to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created website...

10CVSS8.1AI score0.00854EPSS
SaveExploits0References11Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/08/29 12:00 a.m.12 views

The vulnerability in the implementation of the Fullscreen API standard for browsers Google Chrome and Microsoft Edge allows a perpetrator to disclose protected information.

The vulnerability of the Fullscreen API implementation in Google Chrome and Microsoft Edge is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information through a specially created w...

9.4CVSS5.8AI score0.00636EPSS
SaveExploits0References12Affected Software7
BDU FSTEC
BDU FSTEC
added 2022/08/19 12:00 a.m.10 views

The vulnerability of the cookie handling mechanism of Microsoft Edge and Google Chrome allows attackers to circumvent existing security restrictions and disclose sensitive information.

The vulnerability of the cookie handling mechanism in Microsoft Edge and Google Chrome is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions and disclose sensitive information through a specially created websi...

6.4CVSS6.7AI score0.00866EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/08/19 12:00 a.m.14 views

The vulnerability of Intents functions in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of Intents functions in Microsoft Edge and Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by opening a specially created web page remotely...

10CVSS8AI score0.0453EPSS
SaveExploits1References11Affected Software6
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.12 views

The vulnerability of the ANGLE library in Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code.

The vulnerability of the ANGLE library in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.00817EPSS
SaveExploits0References7Affected Software5
BDU FSTEC
BDU FSTEC
added 2022/08/17 12:00 a.m.12 views

The vulnerability of the display mechanism of Blink web pages in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Blink web page rendering mechanism in Microsoft Edge and Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.00667EPSS
SaveExploits0References8Affected Software5
Rows per page
Query Builder