PT-2017-14054

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.75 Opera versions prior to 62.0.3202.75 is not specified, however since Opera is mentioned as affected, we can say: Opera affected versions not specified Description A stack buffer overflow in V8 allow...

K7 Total Security Device Driver Arbitrary Memory Read

Vulnerability Summary The following advisory describes an Crash found in K7 Total Security. Credit An independent security researcher, has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program Vendor response K7 has released patches to address this vulnerability –...

CVE-2017-7119

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-7119

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

Design/Logic Flaw

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

CVE-2017-7119

CVE-2017-7119 affects macOS prior to 10.13 in the IOFireWireFamily driver and allows a crafted app to bypass memory-read restrictions, potentially reading restricted memory locally (CVE demonstrated impact: high confidentiality risk). The issue is documented with both NVD details and Apple securi...

CVE-2017-7119

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

PT-2017-17524

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.13 Description The issue involves the IOFireWireFamily component and allows attackers to bypass intended memory-read restrictions via a crafted app. Recommendations For macOS versions prior to 10.13, update to versio...

CVE-2017-7119: Improper Input Validation

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "IOFireWireFamily" component. It allows attackers to bypass intended memory-read restrictions via a crafted app...

K7 Total Security 15.1.0.305 - Device Driver Arbitrary Memory Read

K7 Total Security 15.1.0.305 - Device Driver Arbitrary Memory Read Vulnerability Summary The following advisory describes an Crash found in K7 Total Security. Credit An independent security researcher, Kyriakos Economou aka @kyREcon, has reported this vulnerability to Beyond Security’s SecuriTeam...

K7 Total Security 15.1.0.305 - Device Driver Arbitrary Memory Read

Vulnerability Summary The following advisory describes an Crash found in K7 Total Security. Credit An independent security researcher, Kyriakos Economou aka @kyREcon, has reported this vulnerability to Beyond Security’s SecuriTeam Secure Disclosure program Vendor response K7 has released patches ...

chromium-browser: use after free in webaudio

A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-5129

A use after free in WebAudio in Blink in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

CVE-2017-15388

Iteration through non-finite points in Skia in Google Chrome prior to 62.0.3202.62 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page...

PT-2017-3615

Name of the Vulnerable Software and Affected Versions: Android versions affected versions not specified Description: The issue is related to improper input validation for vdev id in the wma unified bcntx status event handler function, which can lead to a potential out of bounds memory read. This...

PT-2017-14044

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.62 Opera versions prior to 62.0.3202.62 note: exact version not specified, assuming similar to Chrome Description The issue allows a remote attacker to perform an out of bounds memory read via a crafte...

PT-2017-16328

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 62.0.3202.62 Opera affected versions not specified Description A use after free issue in WebAudio in Blink allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Recommendatio...

CVE-2017-15302

In CPUID CPU-Z through 1.81, there are improper access rights to a kernel-mode driver e.g., cpuz143x64.sys for version 1.43 that can result in information disclosure or elevation of privileges, because of an arbitrary read of any physical address via ioctl 0x9C402604. Any application running on t...

GLSA-201710-14 : WebKitGTK+: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201710-14 WebKitGTK+: Multiple Vulnerabilities Multiple vulnerabilities have been discovered in WebkitGTK+. Please review the references below for details. Impact : A remote attacker could execute arbitrary code, cause a Denial of...

WebKitGTK+: Multiple Vulnerabilities

Background WebKitGTK+ is a full-featured port of the WebKit rendering engine, suitable for projects requiring any kind of web integration, offers Webkit’s full functionality and is used on a wide range of systems. Description Multiple vulnerabilities have been discovered in WebkitGTK+. Please...