Lucene search
+L

991 matches found

CISA KEV Catalog
CISA KEV Catalog
•added 2024/05/16 12:00 a.m.•123 views

Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera...

8.8CVSS7AI score0.11007EPSS
SaveIn wildExploits2
OSV
OSV
•added 2024/05/15 9:15 p.m.•6 views

DEBIAN-CVE-2024-4949

Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

6.5CVSS6.6AI score0.00947EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/05/15 12:00 a.m.•15 views

PT-2024-3653

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 125.0.6422.60 Chromium versions prior to 126.0.6478.182-alt0.c10.1 Chromium-Gost versions prior to 125.0.6422.112-alt0.c10.1 Yandex-browser-stable version 24.4.3.1111-alt1 Chromium versions prior to...

10CVSS7.8AI score0.15236EPSS
SaveExploits3References136
VulnCheck KEV
VulnCheck KEV
•added 2024/05/06 12:00 a.m.•5 views

VulnCheck KEV: CVE-2020-15994

Use after free in V8 in Google Chrome prior to 86.0.4240.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.13073EPSS
SaveIn wildExploits0References2
BDU FSTEC
BDU FSTEC
•added 2024/05/06 12:00 a.m.•21 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially created malicious HTML page...

10CVSS8.1AI score0.21401EPSS
SaveExploits0References14Affected Software5
CNNVD
CNNVD
•added 2024/04/24 12:00 a.m.•28 views

Microsoft Edge 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an information disclosure vulnerability, which is caused by an out-of-bounds read in the V8 API. An attacker can exploit this vulnerability to obtain sensitive information...

6.5CVSS5.9AI score0.00895EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/04/15 12:00 a.m.•4 views

PT-2024-6478

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 126.0.6478.54 Description The issue is related to an inappropriate implementation in V8, a component of Google Chrome, which could allow a remote attacker to potentially perform a sandbox escape via a crafted HT...

9.6CVSS7.1AI score0.00349EPSS
SaveExploits1References18
Positive Technologies
Positive Technologies
•added 2024/03/19 12:00 a.m.•17 views

PT-2024-3277 · Google +4 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 123.0.6312.58 Description: The issue is related to an object lifecycle problem in the V8 JavaScript and WebAssembly engine, allowing a remote attacker to potentially exploit object corruption via a crafted HTML...

10CVSS7.8AI score0.99979EPSS
SaveExploits130References1114
Veracode
Veracode
•added 2024/03/10 11:23 p.m.•41 views

Inappropriate Implementation

Google Chrome is vulnerable to Inappropriate Implementation. The vulnerability is due to an implementation error in the V8 engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS6.4AI score0.12663EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2024/03/05 12:00 a.m.•19 views

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in versions prior to Google Chrome 122.0.6261.111, which stems from an improper implementation in V8...

8.8CVSS8.6AI score0.12663EPSS
SaveExploits1References6
Veracode
Veracode
•added 2024/03/04 4:30 a.m.•28 views

Type Confusion

Google Chrome is vulnerable to Type Confusion. The vulnerability is due to type confusion in the V8 engine of Google Chrome versions prior to 122.0.6261.94. A remote attacker could potentially exploit this by using a crafted HTML page to corrupt objects, leading to security issues...

8.8CVSS6.1AI score0.00833EPSS
SaveExploits1References6Affected Software1
Veracode
Veracode
•added 2024/03/04 4:22 a.m.•37 views

Type Confusion

Google Chrome is vulnerable to Type Confusion. The vulnerability is due to type confusion in the V8 engine of Google Chrome versions prior to 122.0.6261.94. A remote attacker could potentially exploit this by using a crafted HTML page to corrupt objects, leading to security issues...

8.8CVSS6.1AI score0.02578EPSS
SaveExploits2References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/03/04 12:00 a.m.•19 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.02578EPSS
SaveExploits2References12Affected Software6
Positive Technologies
Positive Technologies
•added 2024/01/30 12:00 a.m.•18 views

PT-2024-5215 · Google +4 · Google Chrome +4

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 121.0.6167.139 Description: The issue is related to a use after free in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker could potentially exploit this by using a specially crafted...

10CVSS8.1AI score0.99979EPSS
SaveExploits129References1060
OSV
OSV
•added 2024/01/25 11:21 a.m.•22 views

MGASA-2024-0017 Updated chromium-browser-stable packages fix security vulnerabilities

The chromium-browser-stable package has been updated to the 120.0.6099.224 release. 4 vulnerabilities are fixed; some of them are listed below: High CVE-2024-0517: Out of bounds write in V8. Reported by Toan suto Pham of Qrious Secure on 2024-01-06. High CVE-2024-0518: Type Confusion in V8...

8.8CVSS9.2AI score0.21697EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
•added 2024/01/18 2:47 a.m.•5 views

SUSE CVE-2024-0517

Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.1AI score0.21697EPSS
SaveExploits0References5
OSV
OSV
•added 2024/01/16 10:15 p.m.•3 views

DEBIAN-CVE-2024-0517

Out of bounds write in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.2AI score0.21697EPSS
SaveExploits0References1
VulnCheck KEV
VulnCheck KEV
•added 2024/01/11 12:00 a.m.•12 views

VulnCheck KEV: CVE-2024-0519

Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome,...

8.8CVSS8.7AI score0.03802EPSS
SaveIn wildExploits1References9
Positive Technologies
Positive Technologies
•added 2023/12/03 12:00 a.m.•10 views

PT-2023-8336 · Google +5 · Google Chrome +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.224 Microsoft Edge versions affected versions not specified Description: The issue is related to a type confusion in the V8 JavaScript engine, which can be exploited by a remote attacker to potential...

10CVSS7.7AI score0.99979EPSS
SaveExploits130References1101
Positive Technologies
Positive Technologies
•added 2023/11/14 12:00 a.m.•18 views

PT-2023-7689

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 120.0.6099.109 Description The issue is related to a type confusion in the V8 JavaScript engine, which can be exploited by a remote attacker using a specially crafted HTML page, potentially leading to heap...

10CVSS7.8AI score0.43795EPSS
SaveExploits1References71
Rows per page
Query Builder