18852 matches found
Improper Access Control
chromium is is vulnerable to Improper Access Control. The vulnerability is due to insufficient enforcement of security policies related to the Autofill feature in Google Chrome. This allows a remote attacker to bypass Autofill restrictions via a crafted HTML page...
Spoofing Attack
chromium is vulnerable to Spoofing Attack. The vulnerability exists due to the inappropriate implementation in Prompts in the library, which allows an attacker to spoof security UI via a maliciously crafted HTML page...
Improper Authorization
chromium is vulnerable to Improper Authorization. The vulnerability allows a remote attacker to bypass security mechanisms with the use of a crafted HTML page due to inappropriate implementation in interstitials, and perform unauthorized actions...
Improper Authorization
chromium is vulnerable to Improper Authorization. The vulnerability allows a remote attacker to bypass security mechanisms with the use of a crafted HTML page due to inappropriate implementation in picture in picture, and perform unauthorized actions...
libvpx: Heap buffer overflow in vp8 encoding in libvpx
A heap-based buffer overflow flaw was found in the way libvpx, a library used to process VP8 and VP9 video codecs data, processes certain specially formatted video data via a crafted HTML page. This flaw allows an attacker to crash or remotely execute arbitrary code in an application, such as a w...
libvpx: crash related to VP9 encoding in libvpx
A heap-based buffer overflow flaw was found in libvpx, a library used to process VP9 video codecs data. This issue occurs when processing certain specially formatted video data via a crafted HTML page, allowing an attacker to crash or remotely execute arbitrary code in an application, such as a w...
libvpx: crash related to VP9 encoding in libvpx
A heap-based buffer overflow flaw was found in libvpx, a library used to process VP9 video codecs data. This issue occurs when processing certain specially formatted video data via a crafted HTML page, allowing an attacker to crash or remotely execute arbitrary code in an application, such as a w...
Use After Free
chromium is vulnerable to Use After Free. The vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page when they convinces a user to install a malicious extension...
Fedora 38 : thunderbird (2023-1f5f7b9b92)
The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-1f5f7b9b92 advisory. Rebase / Update to 115.3.1 ; https://www.thunderbird.net/en-US/thunderbird/115.0/whatsnew/ ; https://support.mozilla.org/en-US/kb/thunderbird-115-supernova-f...
Fedora 37 : thunderbird (2023-6b5635d7d3)
The remote Fedora 37 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-6b5635d7d3 advisory. Update to 102.15.1 ; https://www.mozilla.org/en-US/security/advisories/mfsa2023-28/ ; https://www.mozilla.org/en-US/security/advisories/mfsa2023-32/ ;...
openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0292-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0292-1 advisory. - Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
The vulnerability of the multimedia library libvpx arises from improper handling of exception states during the processing of certain special format video data. This vulnerability allows attackers to cause service failures.
The vulnerability of the multimedia library libvpx is related to incorrect processing of exception states during the processing of certain special format video data. Exploiting this vulnerability can allow a malicious actor to cause service failures through a specially created HTML page...
Fedora 38 : firefox (2023-97eea79acb)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-97eea79acb advisory. This update provides the latest release of Firefox, with an important security fix. We highly recommend you install this update immediately and...
RockyLinux 9 : libwebp (RLSA-2023:5214)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:5214 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the RockyLinux security...
CVE-2023-5346
Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2023-5346
Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-5346
Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
Type confusion
Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-5346
Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-5346
CVE-2023-5346 affects Google Chrome/Chromium’s V8 engine prior to 117.0.5938.149. A type confusion in V8 could allow a remote attacker to trigger heap corruption via a crafted HTML page, with high severity (CVSS 3.1: 8.8, network attack vector, user interaction required). Affected component is Ch...