KLA20120 Multiple vulnerabilities in Microsoft Apps

Multiple vulnerabilities were found in Microsoft Apps. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Windows Terminal can be exploited remotely to execute...

PT-2022-16709 · Microsoft · Outlook For Android

Name of the Vulnerable Software and Affected Versions: Outlook for Android affected versions not specified Description: The issue is related to an Elevation of Privilege Vulnerability. There is no information provided about the estimated number of potentially affected devices worldwide or details...

The vulnerability of the Mozilla Firefox browser’s graphical driver for Android allows a hacker to execute arbitrary code.

The vulnerability of the Mozilla Firefox browser’s graphical driver for Android is related to buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by opening a specially created web page...

Safe Browsing now on Opera for Android

Security Safe Browsing now on Opera for Android Share November 11th, 2022 Hi Android users! We’re happy to share that Opera for Android 72 now features Safe Browsing to keep you even safer when browsing or shopping online on your Android device. Safe Browsing protects your online experience by...

DEBIAN-CVE-2022-3310

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

UBUNTU-CVE-2022-3310

Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to 106.0.5249.62 allowed an attacker who convinced the user to install an application to bypass same origin policy via a crafted application. Chromium security severity: Medium...

The vulnerability of the Firefox browser for Android, related to errors in processing hypertext links, allows attackers to gain access to confidential data.

The vulnerability of the Firefox browser for Android is related to errors in processing hypertext links. Exploiting this vulnerability allows a remote attacker to gain access to confidential data...

The vulnerability of the Mozilla Firefox browser for Android, related to deficiencies in access control, allows attackers to circumvent existing security restrictions.

The vulnerability of the Mozilla Firefox browser for Android is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the Mozilla Firefox browser for Android allows attackers to trigger service denial-of-service attacks or perform spear-phishing attacks.

The vulnerability of the Mozilla Firefox browser for Android is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service failures or perform spear-phishing attacks using a specially created link...

PT-2022-14475 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue concerns a side channel information disclosure in PackageManager, allowing an attacker to determine whether an app is installed without requiring query permissions. This could lead to local...

CVE-2022-35290

Under certain conditions SAP Authenticator for Android allows an attacker to access information which would otherwise be restricted...

CWA for Android: Users cannot upload file in Websites delivered through Secure Private Access

File upload options in websites published via Secure Private Access are disabled when accessed via CWA for Android...

CWA for Android: We were unable to tunnel through the proxy

Viewer of CWA for Android fail to establish connection to VDA with below given error message We were unable to connect through the proxy. Error - 0 Logs show following error logs 02-10 05:44:55.989 1117 28821 W System.err: Caused by: android.system.GaiException: androidgetaddrinfo failed: EAINODA...

CVE-2022-1802

If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context. This vulnerability affects Firefox ESR 91.9.1, Firefox 100.0.2, Firefox for Android 100.3.0,...

多款Mozilla产品输入验证错误漏洞

Mozilla Firefox and Mozilla Thunderbird are both products of the Mozilla Foundation in the U.S. Mozilla Firefox is an open-source web browser. Mozilla Thunderbird is a suite of standalone Mozilla Application Suite Mozilla Thunderbird is a stand-alone e-mail client software from the Mozilla...

Security Vulnerabilities fixed in Firefox 100.0.2, Firefox for Android 100.3.0, Firefox ESR 91.9.1, Thunderbird 91.9.1 — Mozilla

If an attacker was able to corrupt the methods of an Array object in JavaScript via prototype pollution, they could have achieved execution of attacker-controlled JavaScript code in a privileged context. An attacker could have sent a message to the parent process where the contents were used to...

Mozilla Firefox Security Feature Issue Vulnerability (CNVD-2023-17326)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security signature issue vulnerability exists in Mozilla Firefox versions prior to 100.0 that stems from Firefox for Android not properly logging and retaining HSTS settings. An attacker can exploit...

UBUNTU-CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

F-Secure SAFE 跨站脚本漏洞

F-Secure F-Secure SAFE is a suite of antivirus software from the Finnish company F-Secure F-secure.F-Secure SAFE Browser for Android is vulnerable to a cross-site scripting vulnerability that can be exploited by attackers to cause arbitrary code execution...

IBM Cognos Analytics has an unspecified vulnerability (CNVD-2022-11191)

IBM Cognos Analytics is a suite of business intelligence software from IBM Corporation. The software includes reports, dashboards and scorecards, and can help companies adjust their decisions by analyzing key factors and key people, etc. A security vulnerability exists in IBM Cognos Analytics...