Lucene search
+L

380 matches found

Qualys Blog
Qualys Blog
•added 2022/02/03 7:22 a.m.•42 views

Catching the RAT called Agent Tesla

For the last few years, the Qualys Research Team has been observing an infamous "Malware-as-a-service" RAT Remote Access Trojan called Agent Tesla. It first appeared in 2014, and since then many variants have been deployed. This malware uses multiple techniques for evading detection as well as...

0.1AI score
SaveExploits0
Mageia
Mageia
•added 2022/02/02 9:29 p.m.•117 views

Updated chromium-browser-stable packages fix security vulnerability

CVE-2022-0096: Use after free in Storage. CVE-2022-0097: Inappropriate implementation in DevTools. CVE-2022-0098: Use after free in Screen Capture. CVE-2022-0099: Use after free in Sign-in. CVE-2022-0100: Heap buffer overflow in Media streams API. CVE-2022-0101: Heap buffer overflow in Bookmarks...

9.6CVSS8.5AI score0.85352EPSS
SaveExploits21References3
Microsoft CVE
Microsoft CVE
•added 2022/02/02 2:03 a.m.•30 views

Chromium: CVE-2022-0459 Use after free in Screen Capture

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.00792EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/02/01 12:00 a.m.•1 views

PT-2022-1597

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 98.0.4758.80 Description The issue is related to a use after free in the Screen Capture function of Google Chrome, which can lead to heap corruption. A remote attacker who has compromised the renderer process an...

10CVSS0.00792EPSS
SaveExploits0
CNVD
CNVD
•added 2022/01/11 12:00 a.m.•43 views

Google Chrome resource management error vulnerability

Google Chrome is a Web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which stems from the product's screen capture component referencing freed memory. A remote attacker could use this vulnerability to create a specially crafted web page, trick a vict...

8.8CVSS2.8AI score0.00933EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
•added 2022/01/06 8:00 a.m.•28 views

Chromium: CVE-2022-0098 Use after free in Screen Capture

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.8AI score0.00933EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
•added 2022/01/06 12:00 a.m.•72 views

Microsoft Edge (Chromium) < 97.0.1072.55 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 97.0.1072.55. It is, therefore, affected by multiple vulnerabilities as referenced in the January 6, 2022 advisory. - Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allowed an...

9.6CVSS7.2AI score0.02543EPSS
SaveExploits20References59
Tenable Nessus
Tenable Nessus
•added 2022/01/05 12:00 a.m.•53 views

FreeBSD : chromium -- multiple vulnerabilities (9eeccbf3-6e26-11ec-bb10-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 9eeccbf3-6e26-11ec-bb10-3065ec8fd3ec advisory. - Use after free in File Manager API in Google Chrome on Chrome OS prior to 97.0.4692.71 allow...

9.6CVSS7.4AI score0.015EPSS
SaveExploits19References26
CNNVD
CNNVD
•added 2022/01/04 12:00 a.m.•16 views

Google Chrome 资源管理错误漏洞

Google Chrome is a Web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which stems from the product's screen capture component referencing freed memory. A remote attacker could use this vulnerability to create a specially crafted web page, trick a vict...

8.8CVSS8.9AI score0.00933EPSS
SaveExploits1References14
Positive Technologies
Positive Technologies
•added 2022/01/04 12:00 a.m.•1 views

PT-2022-1869

Name of the Vulnerable Software and Affected Versions Google Chrome on Chrome OS versions prior to 97.0.4692.71 Description The issue is related to a use after free in the Screen Capture function of Google Chrome, which can lead to heap corruption. An attacker could potentially exploit this by...

9.3CVSS0.00933EPSS
SaveExploits1
Google Chrome Security Advisories
Google Chrome Security Advisories
•added 2022/01/04 12:00 a.m.•408 views

Stable Channel Update for Desktop

The Chrome team is delighted to announce the promotion of Chrome 97 to the stable channel for Windows, Mac and Linux.This will roll out over the coming days/weeks. Chrome 97.0.4692.71 contains a number of fixes and improvements -- a list of changes is available in the log. Watch out for upcoming...

9.6CVSS9AI score0.015EPSS
SaveExploits23Affected Software1
Tenable Nessus
Tenable Nessus
•added 2022/01/04 12:00 a.m.•73 views

Google Chrome < 97.0.4692.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 97.0.4692.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202201stable-channel-update-for-desktop advisory. - Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed ...

9.6CVSS7.5AI score0.015EPSS
SaveExploits21References51
Tenable Nessus
Tenable Nessus
•added 2022/01/04 12:00 a.m.•122 views

Google Chrome < 97.0.4692.71 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 97.0.4692.71. It is, therefore, affected by multiple vulnerabilities as referenced in the 202201stable-channel-update-for-desktop advisory. - Uninitialized use in File API in Google Chrome prior to 97.0.4692.71 allowed a...

9.6CVSS7.5AI score0.015EPSS
SaveExploits21References51
OPENSUSE Linux
OPENSUSE Linux
•added 2021/12/28 12:00 a.m.•64 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2021:1632-1 Rating: important References: 1192310 1192734 1193519 1193713 Cross-References: CVE-2021-38005 CVE-2021-38006 CVE-2021-38007 CVE-2021-38008 CVE-2021-38009 CVE-2021-38010 CVE-2021-38011 CVE-2021-38012...

9.6CVSS9.3AI score0.07836EPSS
SaveExploits2References4
attackerkb
attackerkb
•added 2021/12/23 1:15 a.m.•14 views

CVE-2021-4064

Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.9AI score0.0128EPSS
SaveExploits0References7
OSV
OSV
•added 2021/12/23 1:15 a.m.•12 views

CVE-2021-4064

Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.2AI score
SaveExploits0References5
OSV
OSV
•added 2021/12/23 1:15 a.m.•9 views

DEBIAN-CVE-2021-4064

Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.5AI score0.0128EPSS
SaveExploits0References1
Prion
Prion
•added 2021/12/23 1:15 a.m.•30 views

Design/Logic Flaw

Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.8AI score0.0128EPSS
SaveExploits0References5Affected Software3
UbuntuCve
UbuntuCve
•added 2021/12/23 1:15 a.m.•32 views

CVE-2021-4064

Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.0128EPSS
SaveExploits0References1
OSV
OSV
•added 2021/12/23 1:15 a.m.•13 views

UBUNTU-CVE-2021-4064

Use after free in screen capture in Google Chrome on ChromeOS prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.0128EPSS
SaveExploits0References2
Rows per page
Query Builder