Lucene search
K

790 matches found

OSV
OSV
added 2022/11/01 8:15 p.m.14 views

CVE-2022-3308

Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

7.4CVSS8.3AI score
Exploits0References2
NVD
NVD
added 2022/11/01 8:15 p.m.12 views

CVE-2022-3308

Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

7.4CVSS0.00131EPSS
Exploits1References2
OSV
OSV
added 2022/11/01 8:15 p.m.0 views

UBUNTU-CVE-2022-3308

Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

7.4CVSS7.3AI score0.00131EPSS
Exploits1References2
Prion
Prion
added 2022/11/01 8:15 p.m.17 views

Design/Logic Flaw

Insufficient policy enforcement in developer tools in Google Chrome prior to 106.0.5249.62 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. Chromium security severity: Medium...

4.3CVSS7.4AI score0.00131EPSS
Exploits1References2Affected Software1
Citrix
Citrix
added 2022/10/18 12:0 a.m.3 views

Gateway logon page show blank page with 480 VPN LICENSE error

Unable to access Gateway logon page, browser will show blank page, in the developer tools or fiddler, you we see "480 VPN LICENSE error"...

7AI score
Exploits0
NCSC
NCSC
added 2022/10/12 12:0 a.m.4 views

Vulnerabilities fixed in Microsoft Developer Tools

Vulnerabilities have been fixed in Microsoft Developer Tools. The vulnerabilities allow a local malicious person to perform attacks that result in the following categories of damage: Remote code execution User rights. Access to sensitive data Increased user privileges The tables below provide an...

7.8CVSS7.6AI score0.63197EPSS
Exploits3
ATTACKERKB
ATTACKERKB
added 2022/10/11 7:15 p.m.2 views

CVE-2022-37974

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability...

6.5CVSS6.7AI score0.10807EPSS
Exploits0References3Affected Software4
OSV
OSV
added 2022/10/11 7:15 p.m.0 views

CVE-2022-37974

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability...

6.5CVSS5.8AI score0.10807EPSS
Exploits0References2
NVD
NVD
added 2022/10/11 7:15 p.m.13 views

CVE-2022-37974

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability...

6.5CVSS0.10807EPSS
Exploits0References2
Prion
Prion
added 2022/10/11 7:15 p.m.20 views

Information disclosure

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability...

4.3CVSS7.1AI score0.10807EPSS
Exploits0References1Affected Software2
Microsoft CVE
Microsoft CVE
added 2022/10/11 7:0 a.m.27 views

Windows Mixed Reality Developer Tools Information Disclosure Vulnerability

...

6.5CVSS6.8AI score0.10807EPSS
Exploits0
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.1 views

PT-2022-5660 · Microsoft · Windows Mixed Reality Developer Tools +1

Name of the Vulnerable Software and Affected Versions: Windows Mixed Reality Developer Tools affected versions not specified Description: The issue is related to insufficient access controls in the system, allowing an attacker to gain unauthorized access to protected information. This can be...

7.8CVSS9.3AI score0.10807EPSS
Exploits0References6
CVE
CVE
added 2022/10/11 12:0 a.m.150 views

CVE-2022-37974

CVE-2022-37974 is an information-disclosure vulnerability in Windows Mixed Reality Developer Tools. The advisory entries in the connected set identify the affected component as Windows Mixed Reality Developer Tools and classify the impact as information disclosure, with CVSSv3.1 a base score of 6...

6.5CVSS6.4AI score0.10807EPSS
Exploits0References2Affected Software2
Kaspersky
Kaspersky
added 2022/10/11 12:0 a.m.41 views

KLA20005 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Visual Studio Code...

7.8CVSS9.2AI score0.63197EPSS
Exploits3References9
Veracode
Veracode
added 2022/10/10 6:55 p.m.12 views

Insufficient Policy Enforcement

chromium is vulnerable to insufficient policy enforcement. The vulnerability exists in Developer Tools which allows an attacker to exploit the vulnerability...

7.4CVSS7.8AI score0.00131EPSS
Exploits1References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/10/06 12:0 a.m.160 views

Microsoft Edge (Chromium) < 106.0.1370.34 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 106.0.1370.34. It is, therefore, affected by multiple vulnerabilities as referenced in the October 3, 2022 advisory. - Use after free in CSS. CVE-2022-3304 - Use after free in Media. CVE-2022-3307 - Insufficient policy...

8.8CVSS7.1AI score0.00729EPSS
Exploits4References13
OSV
OSV
added 2022/10/05 5:23 a.m.10 views

MGASA-2022-0357 Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to the new 106 branch with the 106.0.5249.61 version, fixing many bugs and 20 vulnerabilities; it brings as well some improvements. Some of the security fixes are: High CVE-2022-3304: Use after free in CSS. High CVE-2022-3201: Insufficient...

8.8CVSS6.5AI score0.01103EPSS
Exploits6References5
Mageia
Mageia
added 2022/10/05 5:23 a.m.44 views

Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to the new 106 branch with the 106.0.5249.61 version, fixing many bugs and 20 vulnerabilities; it brings as well some improvements. Some of the security fixes are: High CVE-2022-3304: Use after free in CSS. High CVE-2022-3201: Insufficient...

8.8CVSS0.01103EPSS
Exploits6References4
Microsoft CVE
Microsoft CVE
added 2022/10/03 7:0 a.m.37 views

Chromium: CVE-2022-3308 Insufficient policy enforcement in Developer Tools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

7.4CVSS7.8AI score0.00131EPSS
Exploits1
OPENSUSE Linux
OPENSUSE Linux
added 2022/10/03 12:0 a.m.39 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10138-1 Rating: important References: 1203808 Cross-References: CVE-2022-3201 CVE-2022-3304 CVE-2022-3305 CVE-2022-3306 CVE-2022-3307 CVE-2022-3308 CVE-2022-3309 CVE-2022-3310 CVE-2022-3311 CVE-2022-3312...

8.8CVSS6.4AI score0.01103EPSS
Exploits6References1
Rows per page
Query Builder