Lucene search
K

88 matches found

AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.1 views

Astra Linux - уязвимость в chromium

In version 119.0.6045.199 of Google Chrome’s Spellcheck, type confusion allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...

8.8CVSS7.3AI score0.00605EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/12/13 10:0 p.m.3 views

CVE-2025-43518

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, watchOS 26.2. An app may be able to inappropriately access files through the spellcheck API...

3.3CVSS5.8AI score0.00017EPSS
Exploits0References1
OSV
OSV
added 2025/12/12 9:15 p.m.2 views

CVE-2025-43518

A logic issue was addressed with improved checks. This issue is fixed in watchOS 26.2, macOS Sonoma 14.8.3, macOS Tahoe 26.2, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3. An app may be able to inappropriately access files through the spellcheck API...

3.3CVSS5.7AI score
Exploits0References5
NVD
NVD
added 2025/12/12 9:15 p.m.2 views

CVE-2025-43518

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, watchOS 26.2. An app may be able to inappropriately access files through the spellcheck API...

3.3CVSS0.00017EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2025/12/12 8:57 p.m.1 views

CVE-2025-43518

A logic issue was addressed with improved checks. This issue is fixed in watchOS 26.2, macOS Sonoma 14.8.3, macOS Tahoe 26.2, iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3. An app may be able to inappropriately access files through the spellcheck API...

5.3AI score0.00017EPSS
Exploits0References5
Cvelist
Cvelist
added 2025/12/12 8:57 p.m.18 views

CVE-2025-43518

A logic issue was addressed with improved checks. This issue is fixed in iOS 26.2 and iPadOS 26.2, macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2, watchOS 26.2. An app may be able to inappropriately access files through the spellcheck API...

0.00017EPSS
Exploits0References5
CVE
CVE
added 2025/12/12 8:57 p.m.5 views

CVE-2025-43518

CVE-2025-43518 is a logic-issue vulnerability fixed in multiple Apple platforms. The flaw allows an app to potentially inappropriately access files via the spellcheck API. Affected products include watchOS 26.2; macOS Sonoma 14.8.3; macOS Tahoe 26.2; iOS 26.2 and iPadOS 26.2; macOS Sequoia 15.7.3...

3.3CVSS5.8AI score0.00017EPSS
Exploits0References5Affected Software1
EUVD
EUVD
added 2025/12/12 8:57 p.m.1 views

EUVD-2025-203128

A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to inappropriately access files through the spellcheck API...

5.6AI score0.00017EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/12/12 12:0 a.m.2 views

PT-2025-51012

CVE-2025-43518 A logic issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.8.3, macOS Sequoia 15.7.3. An app may be able to inappropriately access files… https://t.co/CiUXjJLsoN...

6.1AI score0.00017EPSS
Exploits0References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-1404

Malware in sbrugna...

4.3CVSS9.3AI score0.00689EPSS
Exploits0References14
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-1429

Malware in sbrugna...

6.8CVSS9.3AI score0.00847EPSS
Exploits0References14
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-20520 Malicious code in figma-api-spellcheck (npm)

The package figma-api-spellcheck was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in figma-api-spellcheck (npm)

The package figma-api-spellcheck was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2024/05/15 9:7 p.m.7 views

GHSA-9CQ2-PCGR-8H62 Cross-site Scripting in eZFind spellcheck

This security advisory fixes a vulnerability in the legacy eZ Find extension, which can be used with the LegacyBridge in eZ Platform. It affects sites using the "Did you mean...?" spell check / search suggestion feature. This feature is vulnerable to Cross-site Scripting XSS injection reflected...

6.5AI score
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2024/02/18 12:0 a.m.39 views

GLSA-202402-14 : QtWebEngine: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202402-14 QtWebEngine: Multiple Vulnerabilities - Use after free in Garbage Collection in Google Chrome prior to 119.0.6045.159 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...

9.6CVSS7.9AI score0.75479EPSS
Exploits4References30
Tenable Nessus
Tenable Nessus
added 2023/12/12 12:0 a.m.34 views

openSUSE 15 Security Update : opera (openSUSE-SU-2023:0396-1)

The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0396-1 advisory. - Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to...

9.6CVSS8.8AI score0.01934EPSS
Exploits0References13
Tenable Nessus
Tenable Nessus
added 2023/12/05 12:0 a.m.27 views

Fedora 37 : chromium (2023-ceaa6b19c1)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-ceaa6b19c1 advisory. update to 119.0.6045.199, upstream security release High CVE-2023-6345: Integer overflow in Skia High CVE-2023-6346: Use after free in WebAudio High...

9.6CVSS8.8AI score0.01934EPSS
Exploits0References7
Veracode
Veracode
added 2023/12/01 3:10 p.m.24 views

Type Confusion

Google Chrome is vulnerable to Type Confusion. The vulnerability exists in the Spellcheck component of the library. An attacker who has compromised the renderer process may potentially perform heap corruption via a crafted HTML page...

8.8CVSS6.8AI score0.00605EPSS
Exploits0References8Affected Software1
SUSE CVE
SUSE CVE
added 2023/12/01 2:20 a.m.1 views

SUSE CVE-2023-6348

Type Confusion in Spellcheck in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9AI score0.00605EPSS
Exploits0References6
Opera Security Advisories
Opera Security Advisories
added 2023/12/01 12:0 a.m.6 views

Update your browser: Security fixes for latest Chrome bugs

News, Security Update your browser: Security fixes for latest Chrome bugs Share December 1st, 2023 Hi everyone! The latest patches to the Opera, Opera GX, and Opera Crypto browsers address several recent vulnerabilities, including a zero-day exploit CVE-2023-6345. We recommend updating your...

9.6CVSS7AI score0.23127EPSS
Exploits12References1
Rows per page
Query Builder