Microsoft Edge (Chromium) < 136.0.3240.50 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 136.0.3240.50. It is, therefore, affected by multiple vulnerabilities as referenced in the May 1, 2025 advisory. - User interface ui misrepresentation of critical information in Microsoft Edge Chromium-based allows an...

Chromium: CVE-2025-4050 Out of bounds memory access in DevTools

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

[SECURITY] [DLA 4146-1] libxml2 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4146-1 [email protected] https://www.debian.org/lts/security/ Thorsten Alteholz April 30, 2025 https://wiki.debian.org/LTS -...

ROS-20250430-03

A vulnerability in the GPAC multimedia platform is related to a heap buffer overflow in the isomedia/sampledescs.c:1799, in gfisomnewmphadescription in gpac/MP4Box. Exploitation of the vulnerability could allow an attacker to cause a denial of service A vulnerability in the GPAC multimedia platfo...

Google Chrome < 136.0.7103.48 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 136.0.7103.48. It is, therefore, affected by multiple vulnerabilities as referenced in the 202504stable-channel-update-for-desktop29 advisory. - Inappropriate implementation in DevTools in Google Chrome prior to...

Google Chrome < 136.0.7103.48 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 136.0.7103.48. It is, therefore, affected by multiple vulnerabilities as referenced in the 202504stable-channel-update-for-desktop29 advisory. - Inappropriate implementation in DevTools in Google Chrome prior to...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 8 security fixes: 409911705 High CVE-2025-4096: Heap buffer overflow in HTML. Reported by Anonymous on 2025-04-11 409342999 Medium CVE-2025-4050: Out of bounds memory access in DevTools. Reported by Anonymous on 2025-04-09 404000989 Medium...

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 136 to the stable channel for Windows, Mac and Linux. This will roll out over the coming days/weeks. Chrome 136.0.7103.59 Linux 136.0.7103.48/49 Windows and Mac contains a number of fixes and improvements -- a list of changes is...

Mageia: Security Advisory (MGASA-2025-0140)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated chromium-browser-stable packages fix security vulnerabilities

Heap buffer overflow in Codecs. CVE-2025-3619 Use after free in USB. CVE-2025-3620...

MGASA-2025-0140 Updated chromium-browser-stable packages fix security vulnerabilities

Heap buffer overflow in Codecs. CVE-2025-3619 Use after free in USB. CVE-2025-3620...

CVE-2025-46687

quickjs-ng through 0.9.0 has a missing length check in JSReadString for a string, leading to a heap-based buffer overflow. QuickJS before 2025-04-26 is also affected...

CVE-2025-46688

CVE-2025-46688 affects quickjs-ng up to 0.9.0, with an incorrect size calculation in JS_ReadBigInt for a BigInt that leads to a heap-based buffer overflow. The vulnerability also affects QuickJS prior to 2025-04-26. Connected sources consistently describe the faulty size computation as the root c...

CVE-2025-3619

Heap buffer overflow in Codecs in Google Chrome on Windows prior to 135.0.7049.95 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...

OSV-2025-298 Heap-buffer-overflow in i18n::phonenumbers::UnicodeText::const_iterator::operator--

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=413161357 Crash type: Heap-buffer-overflow READ 1 Crash state: i18n::phonenumbers::UnicodeText::constiterator::operator-- i18n::phonenumbers::UnicodeString::tempSubString...

PT-2025-30688 · Unknown · Libphonenumber

Name of the Vulnerable Software and Affected Versions: libphonenumber affected versions not specified Description: The libphonenumber library contains a heap-buffer-overflow issue. The issue occurs in the i18n::phonenumbers::UnicodeText::const iterator::operator--,...

[SECURITY] [DLA 4135-1] haproxy security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4135-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk April 23, 2025 https://wiki.debian.org/LTS -...

Fedora 41 : chromium (2025-9c1d536035)

The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-9c1d536035 advisory. Update to 135.0.7049.95 CVE-2025-3619: Heap buffer overflow in Codecs CVE-2025-3620: Use after free in USB Tenable has extracted the preceding...

Fedora 40 : chromium (2025-7827e4feac)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2025-7827e4feac advisory. Update to 135.0.7049.95 CVE-2025-3619: Heap buffer overflow in Codecs CVE-2025-3620: Use after free in USB Tenable has extracted the preceding...

Debian dla-4135 : haproxy - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-4135 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4135-1 [email protected] https://www.debian.org/lts/security/...