Lucene search
+L

8128 matches found

osv_cve
osv_cve
•added 2024/08/06 4:15 p.m.•26 views

CVE-2024-6989

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.8AI score
SaveExploits0References2
NVD
NVD
•added 2024/08/06 4:15 p.m.•31 views

CVE-2024-6989

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00644EPSS
SaveExploits0References2
osv_debian
osv_debian
•added 2024/08/06 4:15 p.m.•15 views

DEBIAN-CVE-2024-6989

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.3AI score0.00644EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2024/08/06 3:37 p.m.•20 views

CVE-2024-6989

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.3AI score0.00644EPSS
SaveExploits0
AlpineLinux
AlpineLinux
•added 2024/08/06 3:37 p.m.•83 views

CVE-2024-6989

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.3AI score0.00644EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/08/06 3:37 p.m.•23 views

CVE-2024-6989

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.3AI score0.00644EPSS
SaveExploits0References2
The Hacker News
The Hacker News
•added 2024/08/06 11:17 a.m.•37 views

North Korean Hackers Moonstone Sleet Push Malicious JS Packages to npm Registry

The North Korea-linked threat actor known as Moonstone Sleet has continued to push malicious npm packages to the JavaScript package registry with the aim of infecting Windows systems, underscoring the persistent nature of their campaigns. The packages in question, harthat-api and harthat-hash, we...

7.5AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/06 12:00 a.m.•1 views

CVE-2024-6989: Use After Free

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.4AI score0.00644EPSS
SaveExploits0References1
FreeBSD
FreeBSD
•added 2024/08/05 12:00 a.m.•44 views

qt5-webengine -- Multiple vulnerabilities

Backports for 6 security bugs in Chromium: CVE-2024-5496: Use after free in Media Session CVE-2024-5846: Use after free in PDFium CVE-2024-6291: Use after free in Swiftshader CVE-2024-6989: Use after free in Loader CVE-2024-6996: Race in Frames CVE-2024-7536: Use after free in WebAudio...

8.8CVSS7AI score0.00896EPSS
SaveExploits2References1
BDU FSTEC
BDU FSTEC
•added 2024/07/31 12:00 a.m.•20 views

Google Chrome Microsoft Edge Code Execution

The vulnerability of the Loader component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause service interruptions or execute arbitrary code...

7.5CVSS7.8AI score0.00644EPSS
SaveExploits0References11Affected Software5
The Hacker News
The Hacker News
•added 2024/07/30 11:06 a.m.•47 views

Cybercriminals Target Polish Businesses with Agent Tesla and Formbook Malware

Cybersecurity researchers have detailed widespread phishing campaigns targeting small and medium-sized businesses SMBs in Poland during May 2024 that led to the deployment of several malware families like Agent Tesla, Formbook, and Remcos RAT. Some of the other regions targeted by the campaigns...

7.2AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/07/26 12:00 a.m.•19 views

PT-2024-29381 · Icecoder · Icecoder

Name of the Vulnerable Software and Affected Versions: ICEcoder version 8.1 Description: The issue is related to a Path Traversal vulnerability. It affects the lib/backup-versions-preview-loader.php file. Recommendations: For ICEcoder version 8.1, consider restricting access to the...

6.3CVSS5.9AI score0.00441EPSS
SaveExploits1References7
osv_cve
osv_cve
•added 2024/07/26 12:00 a.m.•32 views

CVE-2024-41373

ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php...

6.3CVSS5.8AI score0.00441EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/07/26 12:00 a.m.•22 views

ICEcoder security vulnerabilities

ICEcoder is a browser-based code editor from ICEcoder open source. Allows users to code online or offline directly in a web browser. A security vulnerability exists in ICEcoder version 8.1, which stems from the discovery of a contained path traversal vulnerability via...

6.3CVSS5.9AI score0.00441EPSS
SaveExploits1References2
Microsoft CVE
Microsoft CVE
•added 2024/07/25 6:29 p.m.•37 views

Chromium: CVE-2024-6989 Use after free in Loader

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS7AI score0.00644EPSS
SaveExploits0
Kaspersky
Kaspersky
•added 2024/07/25 12:00 a.m.•41 views

KLA71043 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, bypass security restrictions, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1...

8.8CVSS8AI score0.00644EPSS
SaveExploits0References19
Tenable Nessus
Tenable Nessus
•added 2024/07/23 12:00 a.m.•52 views

Google Chrome < 127.0.6533.72 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 127.0.6533.72. It is, therefore, affected by multiple vulnerabilities as referenced in the 202407stable-channel-update-for-desktop23 advisory. - Use after free in CSS in Google Chrome prior to 127.0.6533.72 allowed a...

8.8CVSS8.2AI score0.00644EPSS
SaveExploits0References29
CNNVD
CNNVD
•added 2024/07/23 12:00 a.m.•22 views

Google Chrome security vulnerabilities

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that originates from memory reuse after release in Loader. An attacker can exploit this vulnerability to execute arbitrary code on the system...

8.8CVSS7.9AI score0.00644EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2024/07/20 12:00 a.m.•15 views

PT-2024-40821 · Jflex · Jflex

Name of the Vulnerable Software and Affected Versions: jflex affected versions not specified Description: A security exception crash has been reported. The crash occurs in the jflex.core.NFA.insertNFA function, which is called by java.base/java.lang.ClassLoader.defineClass1 and...

7AI score
SaveExploits0References2
GithubExploit
GithubExploit
•added 2024/07/15 8:07 a.m.•913 views

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Microsoft

Collateral Damage Collateral Damage is a kernel exploit for Xb...

7CVSS7.7AI score0.68202EPSS
SaveExploits7
Rows per page
Query Builder