Lucene search
+L

3192 matches found

CNNVD
CNNVD
added 2023/10/31 12:00 a.m.8 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from a post-release reuse vulnerability in the Profiles module...

8.8CVSS6.6AI score0.01134EPSS
SaveExploits0References8
Tenable Nessus
Tenable Nessus
added 2023/10/31 12:00 a.m.65 views

Google Chrome < 119.0.6045.105 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 119.0.6045.105. It is, therefore, affected by multiple vulnerabilities as referenced in the 202310stable-channel-update-for-desktop31 advisory. - Inappropriate implementation in Downloads in Google Chrome prior to...

8.8CVSS7.7AI score0.07154EPSS
SaveExploits0References27
Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.11 views

PT-2023-6633 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 119.0.6045.105 Description: The issue is related to a use after free vulnerability in the Profiles component of Google Chrome. This vulnerability can be exploited by a remote attacker who convinces a user to...

9.8CVSS7.2AI score0.99735EPSS
SaveExploits131References1106
Positive Technologies
Positive Technologies
added 2023/10/31 12:00 a.m.19 views

PT-2023-28487 · Chef · Chef Inspec

Name of the Vulnerable Software and Affected Versions: Chef InSpec versions prior to 4.56.58 Chef InSpec versions prior to 5.22.29 Description: The issue allows local command execution via maliciously crafted profiles, specifically affecting the archive, check, and export commands in Chef InSpec...

8.8CVSS7.7AI score0.00283EPSS
SaveExploits0References7
Mageia
Mageia
added 2023/10/30 11:05 p.m.45 views

Updated chromium-browser-stable packages fix bugs including security vulnerabilities

The chromium-browser-stable package has been updated to the 118.0.5993.117 release, fixing bugs and 3 vulnerabilities, together with 118.0.5993.88; some of them are listed below: High CVE-2023-5472: Use after free in Profiles...

8.8CVSS7.1AI score0.01245EPSS
SaveExploits0References3
Circl
Circl
added 2023/10/30 9:19 p.m.16 views

CVE-2023-21393

creationtimestamp| type| source ---|---|--- 2023-10-30 21:19:57+00:00| seen| https://t.me/cibsecurity/73177 2025-07-27 04:54:56+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3luwbw644vdd2 2025-07-27 05:39:45+00:00| seen|...

7.8CVSS7.5AI score0.00104EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2023/10/30 12:00 a.m.14 views

The vulnerability of the Profiles component in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the Profiles component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code or cause a service failure by using a specially created HTML page...

10CVSS8.1AI score0.01245EPSS
SaveExploits0References15Affected Software7
Microsoft CVE
Microsoft CVE
added 2023/10/27 9:36 p.m.52 views

Chromium: CVE-2023-5472: Use after free in Profiles

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.01245EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/10/27 12:00 a.m.21 views

FreeBSD : chromium -- multiple vulnerabilities (db33e250-74f7-11ee-8290-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the db33e250-74f7-11ee-8290-a8a1599412c6 advisory. - Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to...

8.8CVSS8.2AI score0.01245EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/10/27 12:00 a.m.32 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0325-1)

The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0325-1 advisory. - Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML...

8.8CVSS8.2AI score0.01245EPSS
SaveExploits0References4
Microsoft KB
Microsoft KB
added 2023/10/26 12:00 a.m.26 views

October 26, 2023—KB5031445 (OS Build 19045.3636) Preview

None None...

6.1AI score
SaveExploits0
OSV
OSV
added 2023/10/25 6:17 p.m.3 views

DEBIAN-CVE-2023-5472

Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.2AI score0.01245EPSS
SaveExploits0References1
OSV
OSV
added 2023/10/25 5:09 p.m.34 views

CVE-2023-37909 Privilege escalation (PR)/remote code execution from account through Menu.UIExtensionSheet

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 5.1-rc-1 and prior to versions 14.10.8 and 15.3-rc-1, any user who can edit their own user profile can execute arbitrary script macros including Groovy and Python macros th...

9.9CVSS8.9AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2023/10/25 4:14 p.m.51 views

CVE-2023-5472

Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.4AI score0.01245EPSS
SaveExploits0
CVE
CVE
added 2023/10/25 4:14 p.m.239 views

CVE-2023-5472

CVE-2023-5472 describes a use-after-free in Chrome/Chromium Profiles prior to 118.0.5993.117, enabling heap corruption via a crafted HTML page for a remote attacker. Impact is high (CVE has base score 8.8). Affected software includes Google Chrome/Chromium; Debian advisories confirm fixed version...

8.8CVSS8.8AI score0.01245EPSS
SaveExploits0References7Affected Software1
SUSE CVE
SUSE CVE
added 2023/10/25 1:00 a.m.6 views

SUSE CVE-2023-5472

Use after free in Profiles in Google Chrome prior to 118.0.5993.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.2AI score0.01245EPSS
SaveExploits0References6
FreeBSD
FreeBSD
added 2023/10/24 12:00 a.m.21 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This update includes 2 security fixes: 1491296 High CVE-2023-5472: Use after free in Profiles. Reported by @18楼梦想改造家 on 2023-10-10...

8.8CVSS7.4AI score0.01245EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/10/24 12:00 a.m.13 views

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome that stems from a use-after-free vulnerability in the Profiles module...

8.8CVSS6.6AI score0.01245EPSS
SaveExploits0References12
ATTACKERKB
ATTACKERKB
added 2023/10/20 10:15 p.m.6 views

CVE-2023-43354

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Profiles parameter in the Extensions -MicroTiny WYSIWYG editor component...

5.4CVSS6.2AI score0.00461EPSS
SaveExploits1References2
OSV
OSV
added 2023/10/20 10:15 p.m.7 views

CVE-2023-43354

Cross Site Scripting vulnerability in CMSmadesimple v.2.2.18 allows a local attacker to execute arbitrary code via a crafted script to the Profiles parameter in the Extensions -MicroTiny WYSIWYG editor component...

5.4CVSS6.1AI score0.00461EPSS
SaveExploits1References1
Rows per page
Query Builder