131 matches found
Advisory ROSA-SA-2025-2602
software: glib2.0 2.72.3 OS: ROSA-CHROME packageevrstring: glib2.0-2.72.3-2 CVE-ID: CVE-2023-32665 BDU-ID: 2023-07655 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Glib library is related to the recovery of invalid data in memory. Exploitation of the vulnerability could allow an attacker to...
Advisory ROSA-SA-2025-2574
software: libsndfile 1.1.0 OS: ROSA-CHROME packageevrstring: libsndfile-1.1.0-4 CVE-ID: CVE-2024-50612 BDU-ID: None CVE-Crit: MEDIUM CVE-DESC.: Vulnerability in libsndfile library: read outside array in oggvorbis.c. CVE-STATUS: The vulnerability has been resolved CVE-REV: To close the...
PT-2025-1285 · Microsoft +5 · Edge +5
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in Compositing, allowing a remote attacker to perform UI spoofing via a crafted...
PT-2025-1287 · Microsoft +5 · Edge +5
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 132.0.6834.83 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in the Extensions component of Google Chrome and Microsoft Edge, allowing a remo...
Stable Channel Update for Desktop
The Chrome team is delighted to announce the promotion of Chrome 132 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 132.0.6834.83 Linux 132.0.6834.83/84 Windows, Mac contains a number of fixes and improvements -- a list of changes is...
PT-2025-40325
Name of the Vulnerable Software and Affected Versions Chromium affected versions not specified Description A flaw exists that allows attackers to affect the system. Specifically, a heap buffer overflow is present in Video. This issue is addressed in Microsoft Edge Chromium-based and Google Chrome...
PT-2025-38298
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 140.0.7339.185 Microsoft Edge affected versions not specified Chromium affected versions not specified Brave affected versions not specified Opera affected versions not specified Vivaldi affected versions not...
A week in security (October 28 – November 3)
Last week on Malwarebytes Labs: 1,000+ web shops infected by "Phish ‘n Ships" criminals who create fake product listings for in-demand products Android malware FakeCall intercepts your calls to the bank Patch now! New Chrome update for two critical vulnerabilities Update your iPhone, Mac, Watch:...
PT-2024-7215 · Google +4 · Google Chrome +5
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 129.0.6668.100 Microsoft Edge versions affected versions not specified Description: The issue is related to a type confusion error in the V8 JavaScript engine, which can be exploited by a remote attacker using ...
Google Chrome Security Update (stable-channel-update-for-desktop_24-2024-09) - Windows
Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...
PT-2024-6550 · Google +3 · Google Chrome +3
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to insufficient data validation in the installer, which can be exploited by a local attacker to perform privilege...
PT-2024-5809 · Google +4 · Google Chrome +4
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in WebApp Installs, allowing an attacker to perform UI spoofing via a crafted HT...
New Android Banking Trojan BingoMod Steals Money, Wipes Devices
Cybersecurity researchers have uncovered a new Android remote access trojan RAT called BingoMod that not only performs fraudulent money transfers from the compromised devices but also wipes them in an attempt to erase traces of the malware. Italian cybersecurity firm Cleafy, which discovered the...
Hackers Target Python Developers with Fake "Crytic-Compilers" Package on PyPI
Cybersecurity researchers have discovered a malicious Python package uploaded to the Python Package Index PyPI repository that's designed to deliver an information stealer called Lumma aka LummaC2. The package in question is crytic-compilers, a typosquatted version of a legitimate library named...
Vulnerability fixed in Google Chrome
Google has fixed a vulnerability in Chrome. A malicious party could exploit the vulnerability to cause a buffer overflow and thereby potentially execute arbitrary code with privileges of the victim, or possibly gain access to sensitive data in the context of the browser. Google states that it is...
PT-2024-3653
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 125.0.6422.60 Chromium versions prior to 126.0.6478.182-alt0.c10.1 Chromium-Gost versions prior to 125.0.6422.112-alt0.c10.1 Yandex-browser-stable version 24.4.3.1111-alt1 Chromium versions prior to...
Exploit for Out-of-bounds Write in Google Chrome
CVE-2024-4761 High CVE-2024-4761 Exploit Google has released...
PT-2024-3929 · Google +6 · Google Chrome +6
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 125.0.6422.141 Microsoft Edge affected versions not specified Description: The issue is related to a use after free vulnerability in the Presentation API of Google Chrome and Microsoft Edge browsers. This...
PT-2024-3076 · Google +6 · Google Chrome +6
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 124.0.6367.60 Microsoft Edge affected versions not specified Description: The issue is related to insufficient policy enforcement in the WebUI of Google Chrome and Microsoft Edge, allowing a remote attacker to...
