Lucene search
K

14 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 5:58 a.m.1 views

SUSE CVE-2010-2302

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE:...

10CVSS7.7AI score0.06106EPSS
Exploits0References4
OSV
OSV
added 2022/06/20 9:13 p.m.4 views

MAL-2022-7196 Malicious code in wm-jquery-shadow-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cce2934c0da39a0931ddef4e3d88c8f5afb631e708767cf3b4e98ec4dff7464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 9:13 p.m.3 views

Malicious code in wm-jquery-shadow-dom (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4cce2934c0da39a0931ddef4e3d88c8f5afb631e708767cf3b4e98ec4dff7464 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2016/03/13 10:59 p.m.1 views

CVE-2016-1643

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

8.8CVSS7.4AI score
Exploits0References10
Prion
Prion
added 2016/03/13 10:59 p.m.21 views

Type confusion

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

9.3CVSS7.6AI score0.02015EPSS
Exploits0References10Affected Software1
Cvelist
Cvelist
added 2016/03/13 10:0 p.m.21 views

CVE-2016-1643

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

8.8AI score0.02015EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2016/03/10 7:6 a.m.2 views

chromium-browser: type confusion in Blink

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

9.3CVSS7.5AI score0.02015EPSS
Exploits0References5
OSV
OSV
added 2016/03/10 12:0 a.m.0 views

UBUNTU-CVE-2016-1643

The ImageInputType::ensurePrimaryContent function in WebKit/Source/core/html/forms/ImageInputType.cpp in Blink, as used in Google Chrome before 49.0.2623.87, does not properly maintain the user agent shadow DOM, which allows remote attackers to cause a denial of service or possibly have unspecifi...

8.8CVSS7.3AI score0.02015EPSS
Exploits0References3
Google Chrome Security Advisories
Google Chrome Security Advisories
added 2014/05/20 12:0 a.m.32 views

Stable Channel Update

The Chrome Team is excited to announce the promotion of Chrome 35 to the Stable channel for Windows, Mac, and Linux. Chrome 35.0.1916.114 contains a number of fixes and improvements, including: More developer control over touch input New JavaScript features Unprefixed Shadow DOM A number of new...

7.5CVSS9AI score0.03199EPSS
Exploits0Affected Software1
NVD
NVD
added 2010/06/15 6:0 p.m.22 views

CVE-2010-2302

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE:...

10CVSS8.8AI score0.06106EPSS
Exploits0References7
UbuntuCve
UbuntuCve
added 2010/06/15 6:0 p.m.23 views

CVE-2010-2302

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE:...

10CVSS5.9AI score0.06106EPSS
Exploits0References1
Prion
Prion
added 2010/06/15 6:0 p.m.22 views

Design/Logic Flaw

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE:...

10CVSS8AI score0.07644EPSS
Exploits0References7Affected Software4
CVE
CVE
added 2010/06/15 5:48 p.m.73 views

CVE-2010-2302

CVE-2010-2302 is a use-after-free in WebKit’s WebCore affecting Google Chrome prior to 5.0.375.70. The flaw involves remote fonts used with shadow DOM trees and can cause memory corruption, leading to a denial of service or potential arbitrary code execution. Affected component: WebKit/WebCore in...

10CVSS8.7AI score0.06106EPSS
Exploits0References7Affected Software1
Cvelist
Cvelist
added 2010/06/15 5:48 p.m.20 views

CVE-2010-2302

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE:...

8.8AI score0.06106EPSS
Exploits0References7
Rows per page
Query Builder