6496 matches found
CVE-2022-1493
Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction...
CVE-2022-1493
Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction...
AZL-10399 CVE-2022-1651 affecting package kernel for versions less than 5.15.67.1-4
A memory leak flaw was found in the Linux kernel in acrndevioctl in the drivers/virt/acrn/hsm.c function in how the ACRN Device Model emulates virtual NICs in VM. This flaw allows a local privileged attacker to leak unauthorized kernel information, causing a denial of service...
Malicious code in melar-dev-site (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e6525cad3c4d1bf0fc67eb122a33e6498564f679ce593c6392b9fb0d24500fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-4546 Malicious code in melar-dev-site (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e6525cad3c4d1bf0fc67eb122a33e6498564f679ce593c6392b9fb0d24500fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-1493: Use After Free
Use after free in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via specific and direct user interaction...
CVE-2022-1500: Improper Input Validation
Insufficient data validation in Dev Tools in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass content security policy via a crafted HTML page...
CVE-2022-1309
Insufficient policy enforcement in developer tools in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...
PT-2022-37113
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash has been reported. The crash involves several functions, including cras iodev list disable dev, cras iodev list rm outpu...
Malicious code in identity-dev-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 375e8519f221cf31732a3293866f4b54b93edb90ba7179ffca4d4944343e9850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3769 Malicious code in identity-dev-docs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 375e8519f221cf31732a3293866f4b54b93edb90ba7179ffca4d4944343e9850 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-2453
Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...
CVE-2022-2453
Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...
Integer overflow
Integer Overflow or Wraparound in GitHub repository gpac/gpac prior to 2.1-DEV...
CVE-2022-2453 Use After Free in gpac/gpac
Use After Free in GitHub repository gpac/gpac prior to 2.1-DEV...
GPAC input validation error vulnerability
GPAC is an open source multimedia framework. An input validation error vulnerability exists in versions prior to GPAC 2.1-DEV, which stems from integer overflow or wrapping...
[SECURITY] Fedora 35 Update: golang-github-magefile-mage-1.11.0-5.fc35
A Make/rake-like dev tool using Go...
Emerging H0lyGh0st Ransomware Tied to North Korea
Microsoft researchers have linked an emerging ransomware threat that already has compromised a number of small-to-mid-sized businesses to financially motivated North Korean state-sponsored actors that have been active since last year. The group has successfully compromised small-to-mid-sized...
North Korean Hackers Targeting Small and Midsize Businesses with H0lyGh0st Ransomware
An emerging threat cluster originating from North Korea has been linked to developing and using ransomware in cyberattacks targeting small businesses since September 2021. The group, which calls itself H0lyGh0st after the ransomware payload of the same name, is being tracked by the Microsoft Thre...
North Korean threat actor targets small and midsize businesses with H0lyGh0st ransomware
A group of actors originating from North Korea that Microsoft Threat Intelligence Center MSTIC tracks as DEV-0530 has been developing and using ransomware in attacks since June 2021. This group, which calls itself H0lyGh0st, utilizes a ransomware payload with the same name for its campaigns and h...