KLA91198 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Heap buffer overflow vulnerability in Skia can be exploited to cause denial of service. 2...

Vulnerability in Tencent WeChat custom browser could lead to remote code execution

Certain versions of WeChat, a popular messaging app created by tech giant Tencent, contain a type confusion vulnerability that could allow an adversary to execute remote code. While this issue, CVE-2023-3420, was disclosed and patched in the V8 engine in June 2023, the WeChat Webview component wa...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially crafted HTML page from a remote location...

Google Warns of CVE-2024-7965 Chrome Security Flaw Under Active Exploitation

Google has revealed that a security flaw that was patched as part of a software update rolled out last week to its Chrome browser has come under active exploitation in the wild. Tracked as CVE-2024-7965, the vulnerability has been described as an inappropriate implementation bug in the V8...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, Inc.V8 is one of the open source JavaScript engines. A security vulnerability exists in Google Chrome version 128.0.6613.84 and prior versions, which stems from the inclusion of a type confusion issue...

PT-2024-6341

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 129.0.6668.58 Description The issue is related to an inappropriate implementation in the V8 engine of Google Chrome, which could allow a remote attacker to potentially exploit stack corruption via a crafted HTML...

PT-2024-5747

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 127.0.6533.99 Microsoft Edge versions affected versions not specified Description The issue is related to a type confusion error in the V8 JavaScript engine, which can lead to heap corruption. This can be...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the use of memory after deallocation. Exploiting this vulnerability allows a remote attacker to execute arbitrary code through a specially created HTML page...

DEBIAN-CVE-2024-3174

Inappropriate implementation in V8 in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

PT-2024-5464

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 126.0.6478.182 Microsoft Edge versions affected versions not specified Description The issue is related to an out of bounds memory access in the V8 JavaScript engine, allowing a remote attacker to potentially...

Astra Linux – Vulnerability in Chromium

Type Confusion in V8 in Google Chrome before version 126.0.6478.54 allowed a remote attacker to perform out-of-bounds memory access through a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2024-6101

Inappropriate implementation in V8 in Google Chrome prior to 126.0.6478.114 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2024-5833

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2024-5837

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2024-5830

Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: High...

Type Confusion

chromium is vulnerable to Type Confusion.This vulnerability due to type confusion in the V8 engine, which fails to properly handle object types, allowing remote attackers to execute arbitrary code within a sandbox environment via a specially crafted HTML page...

Update Chrome Browser Now: 4th Zero-Day Exploit Discovered in May 2024

Google on Thursday rolled out fixes to address a high-severity security flaw in its Chrome browser that it said has been exploited in the wild. Assigned the CVE identifier CVE-2024-5274, the vulnerability relates to a type confusion bug in the V8 JavaScript and WebAssembly engine. It was reported...

PT-2024-4246

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 126.0.6478.54 Microsoft Edge affected versions not specified Description The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to perform out of bounds memory access vi...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to execute arbitrary code through a specially crafted HTTP request...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page...