Lucene search
+L

669 matches found

Veracode
Veracode
•added 2022/09/16 7:26 p.m.•47 views

Improper Input Validation

chromium is vulnerable to improper input validation. The vulnerability exists due to improper input validation in Mojo extension, which allows a remote attacker to perform a sandbox escape via a crafted HTML page...

9.6CVSS8.5AI score0.05806EPSS
SaveExploits0References6Affected Software3
Tenable Nessus
Tenable Nessus
•added 2022/09/13 12:00 a.m.•41 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10119-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10119-1 advisory. - Use after free in Network Service. CVE-2022-3038 - Use after free in WebSQL. CVE-2022-3039, CVE-2022-3041 - Use after free in Layout...

9.6CVSS7.9AI score0.24925EPSS
SaveExploits1References50
CISA KEV Catalog
CISA KEV Catalog
•added 2022/09/08 12:00 a.m.•91 views

Google Chromium Mojo Insufficient Data Validation Vulnerability

Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium,...

9.6CVSS9.2AI score0.05806EPSS
SaveIn wildExploits0
Malwarebytes
Malwarebytes
•added 2022/09/05 4:30 p.m.•100 views

Zero-day puts a dent in Chrome's mojo

On Friday, Google announced the release of a new version of its Chrome browser that includes a security fix for a zero-day tracked as CVE-2022-3075. As with previous announcements, technical details about the vulnerability won't be released until a certain number of Chrome users have already...

7.2AI score0.70461EPSS
SaveExploits4
OpenVAS
OpenVAS
•added 2022/09/05 12:00 a.m.•26 views

Google Chrome Security Update (stable-channel-update-for-desktop-2022-09) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

9.6CVSS9.7AI score0.05806EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2022/09/05 12:00 a.m.•22 views

The vulnerability of the Mojo library for Microsoft Edge and Google Chrome browsers allows a hacker to execute arbitrary code.

The vulnerability of the Mojo library for Microsoft Edge and Google Chrome browsers is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.4AI score0.05806EPSS
SaveExploits0References8Affected Software5
OpenVAS
OpenVAS
•added 2022/09/05 12:00 a.m.•38 views

Google Chrome Security Update (stable-channel-update-for-desktop-2022-09) - Linux

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

9.6CVSS9.7AI score0.05806EPSS
SaveExploits0References3
The Hacker News
The Hacker News
•added 2022/09/03 3:56 a.m.•225 views

Google Releases Urgent Chrome Update to Patch New Zero-Day Vulnerability

Google on Friday shipped emergency fixes to address a security vulnerability in the Chrome web browser that it said is being actively exploited in the wild. The issue, assigned the identifier CVE-2022-3075, concerns a case of insufficient data validation in Mojo, which refers to a collection of...

9.6CVSS7.3AI score0.70461EPSS
SaveExploits4
Tenable Nessus
Tenable Nessus
•added 2022/09/03 12:00 a.m.•35 views

FreeBSD : chromium -- insufficient data validation in Mojo (f38d25ac-2b7a-11ed-a1ef-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f38d25ac-2b7a-11ed-a1ef-3065ec8fd3ec advisory. - Insufficient data validation in Mojo. CVE-2022-3075 Note that Nessus has not tested for this issue bu...

9.6CVSS8.7AI score0.05806EPSS
SaveExploits0References3
Microsoft CVE
Microsoft CVE
•added 2022/09/02 10:09 p.m.•168 views

Chromium: CVE-2022-3075 Insufficient data validation in Mojo

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware of reportsrts that an exploit for CVE-2022-3075 exists in the wild...

9.6CVSS9.1AI score0.05806EPSS
SaveExploits0
CNNVD
CNNVD
•added 2022/09/02 12:00 a.m.•13 views

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. Google Chrome has a security vulnerability that stems from insufficient data validation in Mojo...

9.6CVSS8.4AI score0.05806EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
•added 2022/09/02 12:00 a.m.•90 views

Google Chrome < 105.0.5195.102 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 105.0.5195.102. It is, therefore, affected by a vulnerability as referenced in the 202209stable-channel-update-for-desktop advisory. - Insufficient data validation in Mojo in Google Chrome prior to 105.0.5195.102 allowe...

9.6CVSS8.6AI score0.05806EPSS
SaveExploits0References3
FreeBSD
FreeBSD
•added 2022/09/02 12:00 a.m.•60 views

chromium -- insufficient data validation in Mojo

Chrome Releases reports: This release contains 1 security fix: 1358134 High CVE-2022-3075: Insufficient data validation in Mojo. Reported by Anonymous on 2022-08-30 Google is aware that an exploit of CVE-2022-3075 exists in the wild...

9.6CVSS1.9AI score0.05806EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2022/08/30 12:00 a.m.•11 views

VulnCheck KEV: CVE-2022-3075

Google Chromium Mojo contains an insufficient data validation vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium,...

9.6CVSS8.5AI score0.05806EPSS
SaveIn wildExploits0References5
RedhatCVE
RedhatCVE
•added 2022/05/20 11:49 p.m.•45 views

CVE-2022-0797

Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

8.8CVSS3.4AI score0.01703EPSS
SaveExploits0References1
OSV
OSV
•added 2022/04/05 1:15 a.m.•4 views

DEBIAN-CVE-2022-0797

Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

8.8CVSS8.3AI score0.01703EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/04/05 1:15 a.m.•13 views

CVE-2022-0797

Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

8.8CVSS7.9AI score0.01703EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/04/05 1:15 a.m.•31 views

CVE-2022-0797

Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

8.8CVSS7.2AI score0.01703EPSS
SaveExploits0References2
OSV
OSV
•added 2022/04/05 1:15 a.m.•10 views

UBUNTU-CVE-2022-0797

Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page...

8.8CVSS7.3AI score0.01703EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/04/05 12:15 a.m.•11 views

CVE-2022-0608

Integer overflow in Mojo in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.01114EPSS
SaveExploits0References3
Rows per page
Query Builder