Lucene search
+L

5020 matches found

OSV
OSV
added 2022/12/22 8:15 p.m.13 views

DEBIAN-CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

9.6CVSS7.8AI score0.02349EPSS
SaveExploits1References1
OSV
OSV
added 2022/12/22 8:15 p.m.3 views

DEBIAN-CVE-2022-26485

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus 97.3.0...

8.8CVSS7.5AI score0.14261EPSS
SaveExploits1References1
Prion
Prion
added 2022/12/22 8:15 p.m.43 views

Design/Logic Flaw

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

6.8CVSS8.5AI score0.02349EPSS
SaveExploits1References2Affected Software4
Prion
Prion
added 2022/12/22 8:15 p.m.35 views

Double free

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus 97.3.0...

6.8CVSS8.3AI score0.14261EPSS
SaveExploits1References2Affected Software4
Cvelist
Cvelist
added 2022/12/22 12:00 a.m.53 views

CVE-2022-26485

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus 97.3.0...

8.6AI score0.14261EPSS
SaveExploits1References2
CVE
CVE
added 2022/12/22 12:00 a.m.1751 views

CVE-2022-26485

CVE-2022-26485 is a Mozilla/firefox-family use-after-free vulnerability triggered by removing an XSLT parameter during processing. Affected products include Firefox < 97.0.2, Firefox ESR < 91.6.1, Firefox for Android < 97.3.0, Thunderbird < 91.6.2, and Focus

8.8CVSS8.5AI score0.14261EPSS
SaveIn wildExploits1References3Affected Software4
ATTACKERKB
ATTACKERKB
added 2022/12/22 12:00 a.m.63 views

CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

9.6CVSS8.9AI score0.02349EPSS
SaveIn wildExploits1References3
Cvelist
Cvelist
added 2022/12/22 12:00 a.m.39 views

CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

8.9AI score0.02349EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
added 2022/12/22 12:00 a.m.54 views

CVE-2022-26485

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus 97.3.0...

8.8CVSS8.8AI score0.14261EPSS
SaveExploits1
Debian CVE
Debian CVE
added 2022/12/22 12:00 a.m.116 views

CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

9.6CVSS9.1AI score0.02349EPSS
SaveExploits1
CVE
CVE
added 2022/12/22 12:00 a.m.1698 views

CVE-2022-26486

CVE-2022-26486 describes a use-after-free in the WebGPU IPC framework leading to a sandbox escape. Affected products and versions (per connected docs): Firefox < 97.0.2; Firefox ESR < 91.6.1; Firefox for Android < 97.3.0; Thunderbird < 91.6.2; Focus

9.6CVSS8.8AI score0.02349EPSS
SaveIn wildExploits1References3Affected Software4
ATTACKERKB
ATTACKERKB
added 2022/12/22 12:00 a.m.66 views

CVE-2022-26485

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus 97.3.0. Recent...

8.8CVSS8.1AI score0.14261EPSS
SaveIn wildExploits1References3
Debian CVE
Debian CVE
added 2022/12/22 12:00 a.m.51 views

CVE-2022-26485

Removing an XSLT parameter during processing could have lead to an exploitable use-after-free. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus 97.3.0...

8.8CVSS8.5AI score0.14261EPSS
SaveExploits1
OSV
OSV
added 2022/12/19 11:15 a.m.9 views

CVE-2022-44753

HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted WordPerfect file. This vulnerability applies to software previously...

7.8CVSS6.3AI score0.00646EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/19 11:15 a.m.35 views

CVE-2022-44753

HCL Notes is susceptible to a stack based buffer overflow vulnerability in wp6sr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted WordPerfect file. This vulnerability applies to software previously...

9.8CVSS0.00646EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/19 11:15 a.m.55 views

CVE-2022-44755

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in...

9.8CVSS0.00704EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/19 11:15 a.m.32 views

CVE-2022-44754

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described i...

9.8CVSS0.00646EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/19 11:15 a.m.41 views

CVE-2022-44750

HCL Domino is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described i...

9.8CVSS0.00646EPSS
SaveExploits0References1
NVD
NVD
added 2022/12/19 11:15 a.m.28 views

CVE-2022-44751

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in...

9.8CVSS0.00646EPSS
SaveExploits0References1
Prion
Prion
added 2022/12/19 11:15 a.m.28 views

Stack overflow

HCL Notes is susceptible to a stack based buffer overflow vulnerability in lasr.dll in Micro Focus KeyView. This could allow a remote unauthenticated attacker to crash the application or execute arbitrary code via a crafted Lotus Ami Pro file. This is different from the vulnerability described in...

4.4CVSS8AI score0.00704EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder