CVE-2022-29111

CVE-2022-29111 corresponds to a remote code execution vulnerability in the Windows HEVC Video Extensions codec. The fault is described in connected sources as insufficient input validation within the HEVC codec, enabling an attacker to execute arbitrary code on a vulnerable system. Public exploit...

CVE-2022-29111 HEVC Video Extensions Remote Code Execution Vulnerability

...

CVE-2022-29111 HEVC Video Extensions Remote Code Execution Vulnerability

...

CVE-2022-22018 HEVC Video Extensions Remote Code Execution Vulnerability

...

CVE-2022-22018

CVE-2022-22018 is the Microsoft HEVC Video Extensions remote code execution vulnerability. The linked sources describe it as a vulnerability in the HEVC Video Extensions component that could allow arbitrary code execution on affected Windows systems. Documented affected products include Windows a...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10005-1 Rating: important References: 1199893 Cross-References: CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861 CVE-2022-1862...

Security update for chromium (critical)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10009-1 Rating: critical References: 1199893 1200139 1200423 Cross-References: CVE-2022-1853 CVE-2022-1854 CVE-2022-1855 CVE-2022-1856 CVE-2022-1857 CVE-2022-1858 CVE-2022-1859 CVE-2022-1860 CVE-2022-1861...

HEVC Video Extensions Remote Code Execution Vulnerability

...

HEVC Video Extensions Remote Code Execution Vulnerability

...

HEVC Video Extensions Remote Code Execution Vulnerability

...

HEVC Video Extensions Remote Code Execution Vulnerability

...

Microsoft Windows Codecs Library 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. Microsoft HEVC Video Extensions is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on a system...

Microsoft Windows Codecs Library 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. The application enables computers and devices to read High Efficiency Video Encoding or HEVC video. Microsoft HEVC Video Extensions has a remote code execution vulnerability and no details of the...

Microsoft Windows Codecs Library 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. Microsoft HEVC Video Extensions is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on a system...

Microsoft Windows Codecs Library 安全漏洞

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. Microsoft HEVC Video Extensions is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on a system...

Microsoft Windows HEVC Video Extensions Remote Code Execution (June 2022)

The Windows 'HEVC Video Extensions' or 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploits these vulnerabilities could execute arbitrary code. Exploitation of the vulnerability requires that a...

CVE-2022-31041 Insufficient content-type validation for uploaded files in open-forms

Open Forms is an application for creating and publishing smart forms. Open Forms supports file uploads as one of the form field types. These fields can be configured to allow only certain file extensions to be uploaded by end users e.g. only PDF / Excel / .... The input validation of uploaded fil...

The vulnerability in the implementation of Google Chrome’s browser extensions allows a perpetrator to disclose protected information.

The vulnerability in the implementation of Google Chrome’s browser extensions is related to errors in the implementation of security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially...

Exploit for Unrestricted Upload of File with Dangerous Type in Formidable_Project Formidable

CVE-2022–29622: Invulnerability Analysis This codebase was...

Phoenix-ws source code and data in extensions folder is publicly available

Impact All of the source code, files, and folders in phoenixfiles/extensions/ are available to end users through a simple HTTP GET request. Patches The issue has been patched. The users of version 1.0.6 and above are not effected...