CVE-2023-3935

A heap buffer overflow vulnerability in Wibu CodeMeter Runtime network service up to version 7.60b allows an unauthenticated, remote attacker to achieve RCE and gain full access of the host system...

CVE-2023-3935

CVE-2023-3935 describes a heap buffer overflow in the CodeMeter Runtime network service (Wibu Systems) up to version 7.60b, enabling an unauthenticated, remote attacker to achieve remote code execution and gain full host access. Connected sources confirm the vulnerability is tied to CodeMeter Run...

OPENSUSE-SU-2023:0246-1 Security update for chromium

This update for chromium fixes the following issues: Update to version 116.0.5845.187 boo1215231: CVE-2023-4863: Heap buffer overflow in WebP...

Mozilla Firefox ESR < 115.2.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.2.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of thi...

Mozilla Firefox < 117.0.1

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 117.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of this...

FreeBSD : chromium -- multiple vulnerabilities (88754d55-521a-11ee-8290-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 88754d55-521a-11ee-8290-a8a1599412c6 advisory. - Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote...

Mozilla Firefox ESR < 115.2.1

The version of Firefox ESR installed on the remote Windows host is prior to 115.2.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of this issue...

Mozilla Thunderbird < 115.2.2

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 115.2.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of thi...

Mozilla Thunderbird < 115.2.2

The version of Thunderbird installed on the remote Windows host is prior to 115.2.2. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of this issue...

FreeBSD : electron22 -- multiple vulnerabilities (3693eca5-f0d3-453c-9558-2353150495bb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3693eca5-f0d3-453c-9558-2353150495bb advisory. - Use after free in MediaStream in Google Chrome prior to 116.0.5845.140 allowed a remote...

Mozilla Firefox Security Advisory (MFSA2023-40) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2023-40. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

KLA61312 DoS vulnerability in Opera

Heap buffer overflow vulnerability was found in Opera. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Opera 102.0.4880.51 Stable update Stable Channel Update for Desktop Exploitation Public exploits exist for this vulnerability. Malware exists for...

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2023:0246-1 Rating: important References: 1215231 Cross-References: CVE-2023-4863 CVSS scores: CVE-2023-4863 SUSE: 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4...

Mozilla Thunderbird < 102.15.1

The version of Thunderbird installed on the remote Windows host is prior to 102.15.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of this issue...

FreeBSD : electron{24,25} -- multiple vulnerabilities (773ce35b-eabb-47e0-98ca-669b2b98107a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 773ce35b-eabb-47e0-98ca-669b2b98107a advisory. - Out of bounds memory access in FedCM in Google Chrome prior to 116.0.5845.179 allowed a remo...

Mozilla Firefox ESR < 102.15.1

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 102.15.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of th...

Mozilla Thunderbird < 102.15.1

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 102.15.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of th...

Mozilla Firefox < 117.0.1

The version of Firefox installed on the remote Windows host is prior to 117.0.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2023-40 advisory. - Opening a malicious WebP image could lead to a heap buffer overflow in the content process. We are aware of this issue being...

CVE-2023-4863

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical...

ALPINE-CVE-2023-4863

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical...