Mageia: Security Advisory (MGASA-2020-0209)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KLA12435 Multiple vulnerabilities in Opera

Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Task Manager can be exploited to execute arbitrary code or caus...

Denial Of Service (DoS)

chromium is vulnerable to denial of service. The vulnerability exists due to the heap buffer overflow in DevTools, allowing an attacker to cause an application crash...

Chromium: CVE-2022-0301 Heap buffer overflow in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA12429 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Service Worker API can be exploited to cause denial of servic...

Thunderbird DevTools Copy as curl Command Execution

The vulnerability of the “Copy as curl” function in the Thunderbird email client’s DevTools, as well as in Firefox and Firefox ESR browsers, is related to the execution of arbitrary commands on the target system due to improper input validation. Exploiting this vulnerability allows a remote...

PT-2022-1545

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 97.0.4692.99 Description The issue is related to a heap buffer overflow in the DevTools component of Google Chrome, which could potentially allow an attacker to exploit heap corruption. This could happen if an...

Stable Channel Update for Desktop

The Stable channel has been updated to 97.0.4692.99 for Windows, Mac and Linux which will roll out over the coming days/weeks. Extended stable channel has also been updated to 96.0.4664.110 for Windows and Mac which will roll out over the coming days/weeks A full list of changes in this build is...

Command Injection

firefox-esr is vulnerable to command injection. The constructed curl command from the Copy as curl feature in DevTools is not correctly escaped from PowerShell, allowing an attacker to inject and execute malicious commands...

PT-2022-2111

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 100.0.4896.60 Microsoft Edge affected versions not specified Description The issue is related to a heap buffer overflow in the WebUI of Google Chrome and Microsoft Edge, which can be exploited by a remote attack...

PT-2022-1387

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 100.0.4896.60 Description The issue is related to a use after free in the WebUI of Google Chrome, which can be exploited by a remote attacker who convinces a user to engage in specific user interaction,...

PT-2022-1388

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 100.0.4896.60 Description The issue is related to a heap buffer overflow in the WebUI of Google Chrome, which can be exploited by a remote attacker through specific user interaction and input into DevTools,...

Inappropriate Implementation In DevTools

chrome has Inappropriate implementation in DevTools. An attacker may exploit the vulnerability...

CVE-2022-22744

The constructed curl command from the "Copy as curl" feature in DevTools was not properly escaped for PowerShell. This could have lead to command injection if pasted into a Powershell prompt. This bug only affects Thunderbird for Windows. Other operating systems are unaffected.. This vulnerabilit...

Mozilla Firefox ESR < 91.5

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 91.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-02 advisory. - Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyso...

Mozilla Firefox < 96.0

The version of Firefox installed on the remote Windows host is prior to 96.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-01 advisory. - When a worker is shutdown, it was possible to cause script to run late in the lifecycle, at a point after where it shou...

PT-2022-1402

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 91.5 Firefox versions prior to 96 Thunderbird versions prior to 91.5 Description The issue arises from the "Copy as curl" feature in DevTools, where the constructed curl command is not properly escaped for...

Mozilla Thunderbird < 91.5

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 91.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-03 advisory. - Mozilla developers Calixte Denizet, Kershaw Chang, Christian Holler, Jason Kratzer, Gabriele Svelto, Tyso...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-14880)

Google Chrome is a Web browser from Google, Inc. A security feature vulnerability exists in Google Chrome, which stems from a faulty implementation of the product DevTools. A remote attacker could exploit the vulnerability to create a specially crafted web page, trick victims into accessing it, a...

Mozilla Firefox command injection vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox, which stems from a curl command constructed from the copy-to-curl function in DevTools that is not properly escaped into PowerShell.If pasted into a...