2536 matches found
CVE-2024-7967
CVE-2024-7967 is a heap buffer overflow in Google Chrome’s Fonts implementation (Chromium) prior to 128.0.6613.84. The vulnerability could permit remote exploitation via a crafted HTML page, with impact described as high confidentiality/integrity/availability. Several connected documents corrobor...
Google Chrome < 128.0.6613.84 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 128.0.6613.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop21 advisory. - Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remot...
Google Chrome < 128.0.6613.84 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 128.0.6613.84. It is, therefore, affected by multiple vulnerabilities as referenced in the 202408stable-channel-update-for-desktop21 advisory. - Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a...
chromium -- multiple security fixes
Chrome Releases reports: This update includes 38 security fixes: 358296941 High CVE-2024-7964: Use after free in Passwords. Reported by Anonymous on 2024-08-08 356196918 High CVE-2024-7965: Inappropriate implementation in V8. Reported by TheDog on 2024-07-30 355465305 High CVE-2024-7966: Out of...
WordPress Fonts plugin <= 3.7.7 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Fonts versions = 3.7.7...
WordPress Fonts plugin <= 3.7.7 - Cross Site Request Forgery (CSRF) to Stored XSSvulnerability
Cross Site Request Forgery CSRF to Stored XSSvulnerability discovered by Rafie Muhammad Patchstack in WordPress Plugin Fonts versions = 3.7.7...
WordPress Fonts Plugin <= 3.7.7 is vulnerable to Broken Access Control
Software Fonts Type Plugin Vulnerable versions = 3.7.7 Fixed in 3.7.8 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-43302 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 28935a5c542e Credits Rafie Muhammad Patchstack Required...
WordPress Fonts Plugin <= 3.7.7 is vulnerable to Cross Site Request Forgery (CSRF)
Software Fonts Type Plugin Vulnerable versions = 3.7.7 Fixed in 3.7.8 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-43301 Patch priority Low CVSS severity Low 7.1 Developer Claim ownership PSID 27e6a6b5f399 Credits Rafie Muhammad Patchstack...
SDL_ttf: Arbitrary Memory Write
Background SDLttf is a wrapper around the FreeType and Harfbuzz libraries, allowing you to use TrueType fonts to render text in SDL applications. Description A vulnerability has been discovered in SDLttf. Please review the CVE identifier referenced below for details. Impact SDLttf was discovered ...
MAL-2024-5818 Malicious code in pythonfontsv2 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2542 Malicious code in jetpack-custom-fonts (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in jetpack-custom-fonts (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in fonts.macpaw.com (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2386 Malicious code in fonts.macpaw.com (npm)
--- -= Per source details. Do not edit below this line.=-...
(Pwn2Own) HP Color LaserJet Pro MFP 4301fdw CFF Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of HP Color LaserJet Pro MFP 4301fdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of embedded fonts. The issue results fr...
Important: thunderbird
Issue Overview: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. CVE-2024-4367 If the browser.privatebrowsing.autostart preference is...
Mozilla: Arbitrary JavaScript execution in PDF.js
A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as follows: A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context...
Fedora: Security Advisory for rust-cfonts (FEDORA-2024-40ee18b2e7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
Description PDF.js is vulnerable to Arbitrary JavaScript Execution in versions prior to 4.2.67. This is due to a missing type check when handling fonts. This makes it possible for authenticated attackers, with contributor-level or above permissions, to execute arbitrary JavaScript if they can...
