CVE-2023-2934

Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Design/Logic Flaw

Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-2934

Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-2934

Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-2934

CVE-2023-2934 affects Google Chrome/Chromium Mojo, with out-of-bounds memory access leading to potential heap corruption via a crafted HTML page. Affected versions include Chrome prior to 114.0.5735.90 (and corresponding Chromium builds). The root cause is a Mojo memory access flaw; impact is hig...

CVE-2023-2934

Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-2934

Out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-33974

RIOT-OS, an operating system for Internet of Things IoT devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send multiple crafted frames to the device to trigger a race condition. The race condition invalidates assumptions...

CVE-2023-33974 RIOT-OS vulnerable to Race Condition in SFR Timeout

RIOT-OS, an operating system for Internet of Things IoT devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send multiple crafted frames to the device to trigger a race condition. The race condition invalidates assumptions...

CVE-2023-33974 RIOT-OS vulnerable to Race Condition in SFR Timeout

RIOT-OS, an operating system for Internet of Things IoT devices, contains a network stack with the ability to process 6LoWPAN frames. In versions 2023.01 and prior, an attacker can send multiple crafted frames to the device to trigger a race condition. The race condition invalidates assumptions...

PT-2023-3146 · Riot-Os · Riot-Os

Name of the Vulnerable Software and Affected Versions: RIOT-OS versions 2023.01 and prior Description: The issue is related to a 6LoWPAN frame handler in the RIOT operating system kernel, which is connected to pointer dereference errors. An attacker can exploit this issue by sending multiple...

Google Chrome < 114.0.5735.90 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 114.0.5735.90. It is, therefore, affected by multiple vulnerabilities as referenced in the 202305stable-channel-update-for-desktop30 advisory. - Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a remot...

Google Chrome < 114.0.5735.91 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 114.0.5735.91. It is, therefore, affected by multiple vulnerabilities as referenced in the 202305stable-channel-update-for-desktop30 advisory. - Out of bounds write in Swiftshader. CVE-2023-2929 - Use after free in...

PT-2023-3619 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.90 Description: The issue is related to an out of bounds memory access in Mojo, a component of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page...

Google Chrome < 114.0.5735.90 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 114.0.5735.90. It is, therefore, affected by multiple vulnerabilities as referenced in the 202305stable-channel-update-for-desktop30 advisory. - Type Confusion in V8 in Google Chrome prior to 114.0.5735.90 allowed a...

Wireshark 缓冲区错误漏洞

Wireshark is a free, open-source network protocol analyzer that helps users capture and analyze network packets.Wireshark can be used for a variety of purposes such as network troubleshooting, security auditing, etc. It is a very useful network tool. Wireshark has a security vulnerability. The...

The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird arises from the execution of operations outside the buffer during incorrect software rendering of H.264 video. This allows an attacker to execute a DoS attack.

The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Thunderbird is related to the execution of operations outside the buffer in memory during incorrect software decoding of H.264 video files. Exploiting this vulnerability can allow an attacker to carry out a DoS attack...

Oracle Linux 8 : tigervnc (ELSA-2023-2830)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-2830 advisory. - Rebuild for xorg-x11-server CVE-2022-46340 follow up fix Tenable has extracted the preceding description block directly from the Oracle Linux securit...

The vulnerability of the graphical driver of operating systems iOS, iPadOS, allows a hacker to execute arbitrary code with kernel privileges.

The vulnerability of the graphics driver of iOS and iPadOS systems relates to the issue of operations beyond the buffer in memory during incorrect software rendering of H.264 video. Exploiting this vulnerability allows an attacker to execute arbitrary code with root privileges...

Oracle Linux 8 : xorg-x11-server-Xwayland (ELSA-2023-2805)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-2805 advisory. - Fix CVE-2023-0494 2166972 - Follow-up fix for CVE-2022-46340 2151777 - CVE fix for: CVE-2022-4283 2151802, CVE-2022-46340 2151777, CVE-2022-46341...