2061 matches found
CVE-2022-45418: Improper Restriction of Rendered UI Layers or Frames
If a custom mouse cursor is specified in CSS, under certain circumstances the cursor could have been drawn over the browser UI, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5, and Firefox 107...
CVE-2022-3034: Improper Restriction of Rendered UI Layers or Frames
When receiving an HTML email that specified to load an iframe element from a remote location, a request to the remote document was sent. However, Thunderbird didn't display the document. This vulnerability affects Thunderbird 102.2.1 and Thunderbird 91.13.1...
CVE-2022-45420: Improper Restriction of Rendered UI Layers or Frames
Use tables inside of an iframe, an attacker could have caused iframe contents to be rendered outside the boundaries of the iframe, resulting in potential user confusion or spoofing attacks. This vulnerability affects Firefox ESR 102.5, Thunderbird 102.5, and Firefox 107...
Zoom Client for Meetings 5.10.6 < 5.12.0 Vulnerability (ZSB-22023)
The version of Zoom Client for Meetings installed on the remote host is between 5.10.6 and 5.12.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-22023 advisory. - Zoom Client for Meetings for macOS Standard and for IT Admin starting with 5.10.6 and prior to 5.12.0 contain...
CVE-2022-46061: Improper Restriction of Rendered UI Layers or Frames
AeroCMS v0.0.1 is vulnerable to ClickJacking...
containers/storage: DoS via malicious image
A deadlock vulnerability was found in github.com/containers/storage. When a container image is processed, each layer is unpacked using tar. If one of those layers is not a valid tar archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar...
containers/storage: DoS via malicious image
A deadlock vulnerability was found in github.com/containers/storage. When a container image is processed, each layer is unpacked using tar. If one of those layers is not a valid tar archive this causes an error leading to an unexpected situation where the code indefinitely waits for the tar...
vulkan bug fix and enhancement update
An update is available for shaderc, glslang, spirv-tools, vulkan-loader, vulkan-headers, vulkan-validation-layers, vulkan-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...
CVE-2022-44550
The graphics display module has a UAF vulnerability when traversing graphic layers. Successful exploitation of this vulnerability may affect system availability...
vulkan bug fix and enhancement update
An update is available for spirv-tools, vulkan-loader, vulkan-headers, vulkan-validation-layers, vulkan-tools. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Fo...
PT-2022-19216
Name of the Vulnerable Software and Affected Versions Zoom Client for Meetings for macOS Standard and for IT Admin versions 5.10.6 through 5.11.x Description The issue is related to a debugging port misconfiguration in the Zoom client. When the camera mode rendering context is enabled as part of...
The vulnerability in the implementation of the FeaturePolicy mechanism in browsers such as Firefox, Firefox ESR, and the email client Thunderbird allows a violator to circumvent security restrictions.
The vulnerability in the implementation of the FeaturePolicy mechanism in Firefox browsers, Firefox ESR, and the Thunderbird email client is related to an incorrect limitation on the number of user interface layers or frames that can be displayed. Exploiting this vulnerability could allow a...
CVE-2022-22503: Improper Restriction of Rendered UI Layers or Frames
IBM Robotic Process Automation 21.0.0 could allow a remote attacker to hijack the clicking action of the victim. By persuading a victim to visit a malicious Web site, a remote attacker could exploit this vulnerability to hijack the victim's click actions and possibly launch further attacks agains...
The vulnerability of the Mozilla Firefox browser, related to improper restriction of the displayed user interface layers, allows attackers to perform spoofing attacks.
The vulnerability of the Mozilla Firefox browser is related to an improper limitation on the visual layers of the user interface. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...
The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird arises from incorrect restrictions on the number of user interface layers or frames that can be displayed. This allows attackers to perform spoofing attacks.
The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird is related to an incorrect limitation on the number of user interface layers or frames that can be displayed. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...
Security update for mupdf (moderate)
openSUSE Security Update: Security update for mupdf Announcement ID: openSUSE-SU-2022:10126-1 Rating: moderate References: 1202858 Cross-References: CVE-2018-25032 CVE-2021-4216 CVSS scores: CVE-2018-25032 NVD : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2018-25032 SUSE: 8.1...
The vulnerability of the WebPage rendering module in WebKitGTK, related to improper limitation of the number of user interface layers that can be rendered, allows attackers to compromise data integrity.
The vulnerability of the WebPage rendering module in WebKitGTK is related to an improper limitation on the number of user interface layers that can be rendered. Exploiting this vulnerability allows a remote attacker to compromise the integrity of data...
GHSA-M379-X4XC-38X9 rdiffweb vulnerable to Improper Restriction of Rendered UI Layers or Frames
rdiffweb prior to 2.4.1 is vulnerable to Improper Restriction of Rendered UI Layers or Frames. This allows attackers to perform clickjacking attacks that can trick victims into performing actions such as entering passwords, liking or deleting posts, and/or initiating an account deletion. This iss...
