429 matches found
CVE-2023-36720
Windows Mixed Reality Developer Tools Denial of Service Vulnerability...
Denial of service
Windows Mixed Reality Developer Tools Denial of Service Vulnerability...
CVE-2023-36720 Windows Mixed Reality Developer Tools Denial of Service Vulnerability
...
CVE-2023-36720
CVE-2023-36720 is a DoS vulnerability in Windows Mixed Reality Developer Tools with a CVSS v3.1 base score of 7.5 (HIGH). It requires network access, has no user interaction, and does not require privileges, with the impact limited to availability (I/N; A=HIGH). The available sources identify the...
CVE-2023-36720 Windows Mixed Reality Developer Tools Denial of Service Vulnerability
...
Windows Mixed Reality Developer Tools Denial of Service Vulnerability
...
Microsoft Windows Mixed Reality Developer Tools Security Vulnerability
Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Windows Mixed Reality Developer Tools. An attacker has exploited the vulnerability to cause a denial of service on the...
PT-2023-6068 · Microsoft · Windows Mixed Reality Developer Tools +1
Name of the Vulnerable Software and Affected Versions: Windows Mixed Reality Developer Tools affected versions not specified Description: The issue is related to incorrect resource cleanup, which can be exploited by a remote attacker to cause a denial of service. Recommendations: At the moment,...
Qualcomm Chip Buffer Error Vulnerability
A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and are often manufactured on the surface of semiconductor wafers. The Qualcomm chip suffers from a buffer error vulnerability that stems from a...
The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in its inability to handle resources of incompatible types. This allows a hacker to execute arbitrary code.
The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in its inability to access resources through incompatible types. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted AR format files...
The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the ability to write beyond the buffer boundaries of memory, allowing an attacker to execute arbitrary code.
The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the handling of memory buffer boundaries. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted AR format files...
The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in its reliance on memory after it is released. This allows a hacker to execute arbitrary code.
The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted AR format files...
The vulnerability of Cobalt Ashlar-Vellum’s software for parametric automated design and 3D modeling lies in its reliance on memory after it is released. This allows a hacker to execute arbitrary code.
The vulnerability of Cobalt Ashlar-Vellum’s parametric automated design and 3D modeling software lies in the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code using specially crafted AR format files...
The privacy perils of the Metaverse
A recently released report from New York University claims that the Metaverse, an all-in-one virtual online space, poses a potentially major risk to user privacy. This is because headsets and other similar devices can collect an incredible amount of personal, physical and biometric information. T...
reality.bazos.sk Cross Site Scripting vulnerability OBB-3548856
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the WebXR WebRTC component in Google Chrome, related to the use of memory after its release, allows a hacker to execute arbitrary code.
The vulnerability of the WebXR component in Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
PT-2023-5134 · Microsoft · 3D Builder
Name of the Vulnerable Software and Affected Versions: 3D Builder affected versions not specified Description: The issue is related to a buffer overflow in memory when handling WRL files, which can allow an attacker to execute arbitrary code by loading a specially crafted file or link...
MAL-2023-739 Malicious code in reality-lens-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d73114040cfd355b02673805037b5ea306f6ff220002f3502325b5343fabf434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in reality-lens-sdk (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d73114040cfd355b02673805037b5ea306f6ff220002f3502325b5343fabf434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...