libvpx: crash related to VP9 encoding in libvpx

A heap-based buffer overflow flaw was found in libvpx, a library used to process VP9 video codecs data. This issue occurs when processing certain specially formatted video data via a crafted HTML page, allowing an attacker to crash or remotely execute arbitrary code in an application, such as a w...

Google Chrome Media Memory Misreference Vulnerability

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in Google Chrome Media, which can be exploited by an attacker to perform arbitrary read/write operations via specially crafted HTML pages...

Google Chrome Security Vulnerability

Google Chrome is a web browser from the American company Google Google. A security vulnerability exists in Google Chrome versions prior to 116.0.5845.179. An attacker could exploit the vulnerability to perform spoofing attacks via specially crafted HTML pages...

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser from the American company Google Google. A security vulnerability exists in versions prior to Google Chrome 116.0.5845.179. An attacker exploited the vulnerability to cause heap corruption via specially crafted HTML pages...

PT-2023-4798 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.179 Description: The issue is related to a use after free in the Networks component, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity o...

TSplus 安全漏洞

TSplus is a remote access software software from TSplus. A security vulnerability exists in TSplus version 16.0.2.14, which originates from setting insecure file and folder permissions, which could allow a malicious user to manipulate the contents of a file e.g., change the code of an html page o...

PT-2023-4452 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.96 Description: The issue is related to insufficient policy enforcement in the Extensions API of Google Chrome, allowing a remote attacker to bypass existing security restrictions. This can be achiev...

Debian DSA-5467-1 : chromium - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5467 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For...

SUSE CVE-2023-3733

Inappropriate implementation in WebApp Installs in Google Chrome prior to 115.0.5790.98 allowed a remote attacker to potentially spoof the contents of the Omnibox URL bar via a crafted HTML page. Chromium security severity: Medium...

Fedora 37 : chromium (2023-70aa66d8b2)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-70aa66d8b2 advisory. Update to 114.0.5735.198. Fixes the following security issues: CVE-2023-3420 CVE-2023-3421 CVE-2023-3422 CVE-2023-36191 Tenable has extracted the...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome prior to version 114.0.5735.198, which stems from a memory reuse after release issue in Media. A remote attacker could exploit this vulnerability to cause heap corruption via...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome prior to version 114.0.5735.198, which stems from a memory reuse after release issue in Guest View. The vulnerability is exploited by attackers to convince users to install...

Google Chrome Buffer Overflow Vulnerability (CNVD-2023-43885)

Google Chrome is a web browser from Google, an American company. Google Chrome has a security vulnerability in versions prior to 112.0.5615.137. The vulnerability is due to the Service Worker API in the affected version allows remote attackers to potentially exploit heap corruption via specially...

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0082-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0082-1 advisory. - Use after free in Passwords in Google Chrome prior to 111.0.5563.110 allowed a remote attacker who had compromised the renderer process to...

Google Chrome Autofill component code issue vulnerability

Google Chrome is a web browser from Google, Inc. A code issue vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a weak policy enforcement issue in the Autofill component. A remote attacker could exploit the vulnerability to disclose cross-domain data via...

Google Chrome Web Payments API Component Code Issue Vulnerability

Google Chrome is a web browser from Google, an American company. A code issue vulnerability exists in versions prior to Google Chrome 111.0.5563.64, which stems from a weak policy enforcement issue in the Web Payments API component. A remote attacker could exploit the vulnerability to bypass...

UBUNTU-CVE-2023-1232

Insufficient policy enforcement in Resource Timing in Google Chrome prior to 111.0.5563.64 allowed a remote attacker to obtain potentially sensitive information from API via a crafted HTML page. Chromium security severity: Low...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in Google Chrome versions prior to 111.0.5563.64, which stems from inadequate enforcement of timing policies. An attacker exploits the vulnerability to obtain potentially sensitive information from the API via...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome versions prior to 111.0.5563.64, which stems from improper privilege prompting. An attacker exploited the vulnerability to bypass navigation restrictions via specially crafted...

DEBIAN-CVE-2023-0941

Use after free in Prompts in Google Chrome prior to 110.0.5481.177 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Critical...