Lucene search
+L

723 matches found

OSV
OSV
added 2022/09/26 4:15 p.m.8 views

UBUNTU-CVE-2022-3071

Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction...

8.8CVSS5.8AI score0.00459EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2022/09/26 4:15 p.m.46 views

CVE-2022-3071

Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction...

8.8CVSS7.3AI score0.00459EPSS
SaveExploits0References1
Debian CVE
Debian CVE
added 2022/09/26 3:01 p.m.50 views

CVE-2022-3071

Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction...

8.8CVSS9.7AI score0.00459EPSS
SaveExploits0
Cvelist
Cvelist
added 2022/09/26 3:01 p.m.34 views

CVE-2022-3071

Use after free in Tab Strip in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interaction...

9.4AI score0.00459EPSS
SaveExploits0References4
Veracode
Veracode
added 2022/09/16 7:26 p.m.38 views

Use After Free

chromium is vulnerable to use after free. The vulnerability exists in tab strip in google chrome which allows a remote attacker who convinced an user to engage in specific UI interactions...

8.8CVSS8.6AI score0.00459EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
added 2022/09/13 5:08 p.m.61 views

CVE-2022-32190 Failure to strip relative path components in net/url

JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath"https://go.dev", "../go" returns the URL "https://go.dev/../go", despite the JoinPath documentation stating that ../ path elements are removed from the result...

7.7AI score0.02152EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2022/09/13 12:00 a.m.37 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:10119-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:10119-1 advisory. - Use after free in Network Service. CVE-2022-3038 - Use after free in WebSQL. CVE-2022-3039, CVE-2022-3041 - Use after free in Layout...

9.6CVSS7.9AI score0.24738EPSS
SaveExploits1References50
RedhatCVE
RedhatCVE
added 2022/09/06 2:29 p.m.129 views

CVE-2022-38533

A vulnerability was found in the strip utility of binutils. An attacker able to convince a victim to process a specially crafted COFF file by the strip utility can lead to a heap-based buffer overflow, causing the utility to crash. Mitigation Do not process untrusted files with the strip utility...

5.5CVSS4AI score0.0033EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2022/09/02 12:00 a.m.64 views

Debian DSA-5223-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5223 advisory. Multiple security issues were discovered in Chromium, which could result in the execution of arbitrary code, denial of service or information disclosure. For the...

8.8CVSS7.8AI score0.24738EPSS
SaveExploits1References48
BDU FSTEC
BDU FSTEC
added 2022/09/02 12:00 a.m.13 views

The vulnerability of the Tab Strip control element in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Tab Strip control element in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS8AI score0.00459EPSS
SaveExploits0References4Affected Software3
Kaspersky
Kaspersky
added 2022/08/30 12:00 a.m.573 views

KLA15732 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Layout can be exploited to caus...

8.8CVSS9.7AI score0.24738EPSS
SaveExploits3References4
BDU FSTEC
BDU FSTEC
added 2022/08/29 12:00 a.m.15 views

The vulnerability of the Tab Strip control element in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Tab Strip control element in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created web page from a remote location...

10CVSS8.1AI score0.00488EPSS
SaveExploits0References10Affected Software6
OSV
OSV
added 2022/08/26 12:15 a.m.13 views

AZL-10714 CVE-2022-38533 affecting package binutils for versions less than 2.37-4

In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...

5.5CVSS6.6AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/26 12:15 a.m.6 views

ALPINE-CVE-2022-38533

In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...

5.5CVSS6.6AI score0.0033EPSS
SaveExploits0References1
OSV
OSV
added 2022/08/26 12:15 a.m.10 views

UBUNTU-CVE-2022-38533

In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...

5.5CVSS6.5AI score0.0033EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
added 2022/08/25 12:00 a.m.146 views

CVE-2022-38533

In GNU Binutils before 2.40, there is a heap-buffer-overflow in the error function bfdgetl32 when called from the stripmain function in strip-new via a crafted file...

5.5CVSS3.5AI score0.0033EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/08/19 3:55 a.m.3 views

Malicious code in strip-json-combmentd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a20fa5526c6a0df61a797f86e6d329e0408842e47e87e33a019451d14197ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/08/19 3:55 a.m.11 views

MAL-2022-6328 Malicious code in strip-nasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cfddc540eaf06aed8dd7009c0a3b04ba47449e4a5fc742ab8326c2e5a540d31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/08/19 3:55 a.m.5 views

Malicious code in strip-nasi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cfddc540eaf06aed8dd7009c0a3b04ba47449e4a5fc742ab8326c2e5a540d31 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/08/19 3:55 a.m.15 views

MAL-2022-6327 Malicious code in strip-json-combmentd (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a20fa5526c6a0df61a797f86e6d329e0408842e47e87e33a019451d14197ffa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Rows per page
Query Builder