CVE-2023-1529

Out of bounds memory access in WebHID in Google Chrome prior to 111.0.5563.110 allowed a remote attacker to potentially exploit heap corruption via a malicious HID device. Chromium security severity: High...

CVE-2023-1529

CVE-2023-1529 is an out-of-bounds memory access in WebHID for Google Chrome prior to 111.0.5563.110, enabling a remote attacker to potentially trigger heap corruption via a malicious HID device. Multiple connected sources corroborate the same vulnerability class and affected component: Chromium/W...

SUSE-SU-2023:0852-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-4129: Fixed a denial of service with the Layer 2 Tunneling Protocol L2TP. A missing lock when clearing skuserdata can lead to a race condition and NULL...

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 8 security fixes: 1421773 High CVE-2023-1528: Use after free in Passwords. Reported by Wan Choi of Seoul National University on 2023-03-07 1419718 High CVE-2023-1529: Out of bounds memory access in WebHID. Reported by anonymous on 2023-02-27 1419831...

PT-2023-2365

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to allocate and initialize a huge number of page tables to be used as a...

Google Chrome < 111.0.5563.110 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 111.0.5563.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 202303stable-channel-update-for-desktop21 advisory. - Use after free in WebProtect in Google Chrome prior to 111.0.5563.110...

Google Chrome < 111.0.5563.110 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 111.0.5563.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 202303stable-channel-update-for-desktop21 advisory. - Use after free in WebProtect in Google Chrome prior to 111.0.5563.110 allow...

CBL Mariner 2.0 Security Update: fluent-bit / hvloader (CVE-2021-36647)

The version of fluent-bit / hvloader installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-36647 advisory. - Use of a Broken or Risky Cryptographic Algorithm in the function mbedtlsmpiexpmod in lignum.c...

CBL Mariner 2.0 Security Update: kernel (CVE-2022-2380)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-2380 advisory. - The Linux kernel was found vulnerable out of bounds memory access in the...

EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2023-1544)

According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was found in X.Org. This security flaw occurs because the XkbCopyNames function left a dangling pointer to freed memory,...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2023-12199)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12199 advisory. - ipv6: raw: Deduct extension header length in rawv6pushpendingframes Herbert Xu Orabug: 35005830 CVE-2023-0394 - net: sched: disallow noqueue for qdi...

SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2023:0778-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0778-1 advisory. The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. - CVE-2022-36280: Fixed out-of-bounds...

CVE-2023-21459

Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault...

Design/Logic Flaw

Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault...

SUSE-SU-2023:0780-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver bsc1203332. - CVE-2022-38096: Fixed NULL-ptr deref in vmwcmddxdefinequery...

SUSE-SU-2023:0778-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. - CVE-2022-36280: Fixed out-of-bounds memory access vulnerability found in vmwgfx driver bsc1203332. - CVE-2022-38096: Fixed NULL-ptr deref in vmwcmddxdefinequery bsc1203331. - CVE-2023-0045: Fixed missi...

CVE-2023-21459

Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault...

PT-2023-18227 · Unknown · Decon Driver

Name of the Vulnerable Software and Affected Versions: decon driver versions prior to SMR Mar-2023 Release 1 Description: The issue is related to a use after free vulnerability in the decon driver, which allows attackers to cause a memory access fault. Recommendations: For versions prior to SMR...

CVE-2023-21459

Use after free vulnerability in decon driver prior to SMR Mar-2023 Release 1 allows attackers to cause memory access fault...

CVE-2023-21459

CVE-2023-21459 is a use-after-free vulnerability in the Samsung decon driver, pre-SMR Mar-2023 Release 1. The issue enables memory access faults due to a post-release reuse of resources in the decon driver. Affected component: decon driver (Samsung mobile devices). Impact is described as memory a...