Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1303-1 Rating: important References: 1190096 1190476 Cross-References: CVE-2021-30606 CVE-2021-30607 CVE-2021-30608 CVE-2021-30609 CVE-2021-30610 CVE-2021-30611 CVE-2021-30612 CVE-2021-30613 CVE-2021-30614...

Chromium: CVE-2021-30633 Use after free in Indexed DB API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

KLA12296 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Stack buffer overflow...

Information Disclosure

chromium is vulnerable to information disclosure. The vulnerability exists due to a use after free in Indexed DB API...

Google Chrome < 93.0.4577.82 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 93.0.4577.82. It is, therefore, affected by multiple vulnerabilities as referenced in the 202109stable-channel-update-for-desktop advisory. - Use after free in Indexed DB API in Google Chrome prior to 93.0.4577.82 allow...

[ASA-202109-6] chromium: arbitrary code execution

Arch Linux Security Advisory ASA-202109-6 ========================================= Severity: High Date : 2021-09-14 CVE-ID : CVE-2021-30625 CVE-2021-30626 CVE-2021-30627 CVE-2021-30628 CVE-2021-30629 CVE-2021-30630 CVE-2021-30631 CVE-2021-30632 CVE-2021-30633 Package : chromium Type : arbitrary...

Google Chrome Indexed DB API code execution vulnerability

Google Chrome is a web browser from Google, Inc. A code execution vulnerability exists in the Google Chrome Indexed DB API. A remote attacker could use this vulnerability to execute arbitrary code on the system or cause a denial of service condition...

Sensitive links in search results of TYPO3 extension indexed_search

On TYPO3 websites where the “Indexed Search” extension is used, sensitive links may get indexed. The problem occurs when a TYPO3 page contains a plugin that handles possible sensitive actions via HTTP GET parameters e.g. confirmation action for a newsletter subscription, or similar token-based...

The vulnerability of Google Chrome’s IndexedDB component allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of Google Chrome’s IndexedDB component relates to the use of memory areas after they are freed. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Denial Of Service (DoS)

github.com/golang/text is vulnerable to Denial Of Service DoS. The vulnerability exist as the function resizeRange was indexed in an insecure way which would cause an application crash...

CVE-2020-6116

An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. When drawing the contents of a page using colors from an indexed colorspace, the application can miscalculate the size of a buffer when allocating space for its colors...

CVE-2020-6116

An arbitrary code execution vulnerability exists in the rendering functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242. When drawing the contents of a page using colors from an indexed colorspace, the application can miscalculate the size of a buffer when allocating space for its colors...

The vulnerability of the Deep Packet Inspection (DPI) implementation in the SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software allows a attacker to trigger a service failure.

The vulnerability of the Deep Packet Inspection DPI implementation in SD-WAN vEdge 5000 Series and SD-WAN vEdge Cloud software lies in unauthorized access to the indexed source. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Simple Network Management Protocol packet processor in Cisco IOS and IOS XE operating systems allows a attacker to trigger a service failure.

The vulnerability of the Simple Network Management Protocol packet processor in Cisco IOS and IOS XE operating systems relates to unauthorized access to the indexed resource. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Apple Safari HasIndexedProperty Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the implementation of...

Windows Explorer stops responding if you try to expand a mapped drive in Windows 7 or in Windows Server 2008 R2

Windows Explorer stops responding if you try to expand a mapped drive in Windows 7 or in Windows Server 2008 R2 Symptoms Considering the following scenario: You have a mapped drive that connects to a shared network location on a computer that is running Windows 7 or Windows Server 2008 R2. Note T...

CVE-2019-16782

There's a possible information leak / session hijack vulnerability in Rack RubyGem rack. This vulnerability is patched in versions 1.6.12 and 2.0.8. Attackers may be able to find and hijack sessions by using timing attacks targeting the session id. Session ids are usually stored and indexed in a...

DEBIAN-CVE-2019-5826

Use after free in IndexedDB in Google Chrome prior to 73.0.3683.86 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page...

Mozilla: Use-after-free when creating index updates in IndexedDB

A use-after-free flaw was found in Mozilla Firefox and Thunderbird. When following a value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. An attacker could use this flaw to execute code that was stored in the referenced memory or...

Mozilla: Use-after-free when creating index updates in IndexedDB

A use-after-free flaw was found in Mozilla Firefox and Thunderbird. When following a value's prototype chain, it was possible to retain a reference to a locale, delete it, and subsequently reference it. An attacker could use this flaw to execute code that was stored in the referenced memory or...