3535 matches found
CVE-2022-26486
An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...
CVE-2022-46314
The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...
Design/Logic Flaw
The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...
CVE-2022-46314
The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...
CVE-2022-46314
The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...
KLA20199 Multiple vulnerabilities in Opera
Multiple vulnerabilities were found in Opera. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Mojo IPC can be exploited to cause denial of service or execute...
PT-2022-27806
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The IPC module has defects introduced in the design process. Successful exploitation of this issue may affect system availability. Recommendations At the...
CVE-2022-46314: Improper Resource Shutdown or Release
The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...
CVE-2022-46314
Technical details about CVE-2022-46314 are not publicly available in the provided documents. Available references reiterate a design flaw in the IPC module with potential availability impact; monitor for updates.
Chromium: CVE-2022-4437 Use after free in Mojo IPC
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
OPENSUSE-SU-2022:10245-1 Security update for chromium
This update for chromium fixes the following issues: Update to version 108.0.5359.124 boo1206403: - CVE-2022-4436: Use after free in Blink Media - CVE-2022-4437: Use after free in Mojo IPC - CVE-2022-4438: Use after free in Blink Frames - CVE-2022-4439: Use after free in Aura - CVE-2022-4440: Use...
Debian DSA-5302-1 : chromium - security update
The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5302 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For the...
KLA20144 Multiple vulnerabilities in Microsoft Browser
Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Blink Media can be exploited to cause denial of service o...
Information Disclosure
firefox is vulnerable to Information Disclosure. An attacker who compromised a content process is able to partially escape the sandbox to read arbitrary files via clipboard-related IPC messages...
Mozilla: Arbitrary file read from a compromised content process
The Mozilla Foundation Security Advisory describes this flaw as: An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages. This bug only affects Firefox for Linux. Other operating systems are unaffected...
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5782-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5782-1 advisory. It was discovered that Firefox was using an out-of-date libusrsctp library. An attacker could possibly use this library to perform a reentran...
CVE-2022-4437
Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2022-4437
Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
DEBIAN-CVE-2022-4437
Use after free in Mojo IPC in Google Chrome prior to 108.0.5359.124 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...