Lucene search
+L

999 matches found

OSV
OSV
added 2022/11/09 4:15 a.m.26 views

CVE-2022-3886

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS6.2AI score
SaveExploits0References3
OSV
OSV
added 2022/11/09 4:15 a.m.4 views

DEBIAN-CVE-2022-3886

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.2AI score0.00715EPSS
SaveExploits0References1
NVD
NVD
added 2022/11/09 4:15 a.m.18 views

CVE-2022-3886

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS0.00715EPSS
SaveExploits0References3
Prion
Prion
added 2022/11/09 4:15 a.m.31 views

Design/Logic Flaw

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

6.8CVSS9AI score0.00715EPSS
SaveExploits0References3Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/11/09 4:15 a.m.6 views

CVE-2022-3886

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.4AI score0.00715EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/11/09 4:15 a.m.36 views

CVE-2022-3886

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.2AI score0.00715EPSS
SaveExploits0References3
OSV
OSV
added 2022/11/09 4:15 a.m.9 views

UBUNTU-CVE-2022-3886

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS7.3AI score0.00715EPSS
SaveExploits0References4
CVE
CVE
added 2022/11/09 12:0 a.m.164 views

CVE-2022-3886

CVE-2022-3886 is a use-after-free in Google Chrome’s Speech Recognition feature, prior to 107.0.5304.106, allowing a remote attacker to potentially cause heap corruption via a crafted HTML page. The Chrome update notes indicate this and other fixes in Stable Channel 107.x, with the CVE listed as ...

8.8CVSS9AI score0.00715EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/09 12:0 a.m.15 views

CVE-2022-3886

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

9AI score0.00715EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/11/09 12:0 a.m.40 views

FreeBSD : chromium -- multiple vulnerabilities (6b04476f-601c-11ed-92ce-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6b04476f-601c-11ed-92ce-3065ec8fd3ec advisory. - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...

9.6CVSS8.6AI score0.00824EPSS
SaveExploits0References8
Debian CVE
Debian CVE
added 2022/11/09 12:0 a.m.42 views

CVE-2022-3886

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.6AI score0.00715EPSS
SaveExploits0
Cvelist
Cvelist
added 2022/11/09 12:0 a.m.39 views

CVE-2022-3886

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

9.3AI score0.00715EPSS
SaveExploits0References3
OSV
OSV
added 2022/11/08 10:15 p.m.9 views

CVE-2022-20453

In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersion...

5.5CVSS5.9AI score0.00158EPSS
SaveExploits0References1
NVD
NVD
added 2022/11/08 10:15 p.m.38 views

CVE-2022-20453

In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersion...

5.5CVSS0.00158EPSS
SaveExploits0References1
Prion
Prion
added 2022/11/08 10:15 p.m.24 views

Path traversal

In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersion...

1.9CVSS5.4AI score0.00158EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/11/08 12:0 a.m.44 views

CVE-2022-20453

In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. This could lead to local denial of service of SIM recognition with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersion...

5.6AI score0.00158EPSS
SaveExploits0References1
CVE
CVE
added 2022/11/08 12:0 a.m.169 views

CVE-2022-20453

CVE-2022-20453 affects Android 10–13 (Android-10 to Android-13) and involves a path traversal in MmsProvider.java that can constrict directory permissions, enabling local DoS of SIM recognition. The exploit requires user interaction and does not grant additional code execution privileges. The bas...

5.5CVSS5.4AI score0.00158EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/11/08 12:0 a.m.8 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which stems from a post-release memory reuse issue in Speech Recognition. No details of the vulnerability are currently available...

8.8CVSS6.7AI score0.00715EPSS
SaveExploits0References8
Kaspersky
Kaspersky
added 2022/11/08 12:0 a.m.340 views

KLA20038 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to cause denial of service. 2. Use after...

9.6CVSS10AI score0.00824EPSS
SaveExploits0References4
FreeBSD
FreeBSD
added 2022/11/08 12:0 a.m.56 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 10 security fixes, including: 1377816 High CVE-2022-3885: Use after free in V8. Reported by gzobqq@ on 2022-10-24 1372999 High CVE-2022-3886: Use after free in Speech Recognition. Reported by anonymous on 2022-10-10 1372695 High CVE-2022-3887: Use...

9.6CVSS0.5AI score0.00824EPSS
SaveExploits0References1
Rows per page
Query Builder