Lucene search
K

7 matches found

CNVD
CNVD
added 2023/05/06 12:0 a.m.30 views

Google Chrome OS Inputs Code Execution Vulnerability

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome OS Inputs, which can be exploited by an attacker to execute arbitrary code or cause a denial of service condition on a system...

8.8CVSS7.9AI score0.004EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2023/05/05 12:0 a.m.30 views

Debian DSA-5398-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5398 advisory. - Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML...

8.8CVSS7.2AI score0.004EPSS
Exploits0References24
OSV
OSV
added 2023/05/03 12:15 a.m.22 views

CVE-2023-2461

Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. Chromium security severity: Medium...

8.8CVSS6.3AI score
Exploits0References7
UbuntuCve
UbuntuCve
added 2023/05/03 12:15 a.m.38 views

CVE-2023-2461

Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. Chromium security severity: Medium...

8.8CVSS7.2AI score0.004EPSS
Exploits0References5
FreeBSD
FreeBSD
added 2023/05/03 12:0 a.m.39 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 15 security fixes: 1423304 Medium CVE-2023-2459: Inappropriate implementation in Prompts. Reported by Rong Jian of VRI on 2023-03-10 1419732 Medium CVE-2023-2460: Insufficient validation of untrusted input in Extensions. Reported by Martin Bajanik,...

8.8CVSS7.4AI score0.004EPSS
Exploits0References1
CVE
CVE
added 2023/05/02 11:47 p.m.150 views

CVE-2023-2461

CVE-2023-2461 affects Google Chrome/Chromium OS Inputs on ChromeOS before 113.0.5672.63. Root cause: use-after-free in OS Inputs leading to heap corruption via crafted UI interaction after user engagement. Impact per sources: remote attacker could exploit via user interaction; CVSS v3.1 indicates...

8.8CVSS8.9AI score0.004EPSS
Exploits0References7Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/02 11:47 p.m.16 views

CVE-2023-2461

Use after free in OS Inputs in Google Chrome on ChromeOS prior to 113.0.5672.63 allowed a remote attacker who convinced a user to enage in specific UI interaction to potentially exploit heap corruption via crafted UI interaction. Chromium security severity: Medium...

9.1AI score0.004EPSS
Exploits0References7
Rows per page
Query Builder