Lucene search
+L

1018 matches found

CNNVD
CNNVD
•added 2023/02/07 12:00 a.m.•20 views

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. A type obfuscation vulnerability exists in versions prior to Google Chrome 110.0.5481.77, which stems from the presence of type obfuscation in V8. An attacker could exploit this vulnerability to cause heap corruption via specially...

8.8CVSS8.7AI score0.00584EPSS
SaveExploits0References8
hivepro
hivepro
•added 2022/12/06 6:19 a.m.•83 views

Google Chrome’s ninth zero-day in 2022

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary CVE-2022-4262 is the fourth actively exploited type confusion bug in Chrome addressed by Google and the ninth zero-day flaw exploited in the wild in 2022. The bug exists as a result of a type...

1.7AI score0.2351EPSS
SaveExploits2
Positive Technologies
Positive Technologies
•added 2022/12/02 12:00 a.m.•16 views

PT-2022-5754

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 108.0.5359.94 Description The issue is related to a type confusion vulnerability in the V8 JavaScript engine of Google Chrome, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML...

10CVSS8.4AI score0.2351EPSS
SaveExploits2
OSV
OSV
•added 2022/11/30 12:15 a.m.•7 views

DEBIAN-CVE-2022-4174

Type confusion in V8 in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS8.2AI score0.00959EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2022/11/11 12:00 a.m.•15 views

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine relates to the ability to utilize memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8AI score0.00834EPSS
SaveExploits0References7Affected Software4
Debian CVE
Debian CVE
•added 2022/11/09 12:00 a.m.•48 views

CVE-2022-3885

Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

8.8CVSS9.6AI score0.00834EPSS
SaveExploits0
CNNVD
CNNVD
•added 2022/11/08 12:00 a.m.•13 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. Google Chrome has a security vulnerability that stems from a post-release memory reuse issue in V8. No details of the vulnerability are currently available...

8.8CVSS6.8AI score0.00834EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
•added 2022/10/27 12:00 a.m.•1 views

PT-2022-5262

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 107.0.5304.87 Description The issue is related to a type confusion in the V8 engine of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This is...

9.7CVSS6.9AI score0.07921EPSS
SaveExploits1
OSV
OSV
•added 2022/09/26 4:15 p.m.•8 views

DEBIAN-CVE-2022-3045

Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.01156EPSS
SaveExploits0References1
OSV
OSV
•added 2022/09/26 4:15 p.m.•10 views

UBUNTU-CVE-2022-3045

Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.01156EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/07/28 2:15 a.m.•4 views

CVE-2022-2295

Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.1AI score0.01416EPSS
SaveExploits0References8
Prion
Prion
•added 2022/07/28 1:15 a.m.•25 views

Type confusion

Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.4AI score0.01028EPSS
SaveExploits0References5Affected Software3
Prion
Prion
•added 2022/07/26 10:15 p.m.•27 views

Type confusion

Type confusion in V8 in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page...

6.8CVSS7.6AI score0.00936EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2022/07/25 2:15 p.m.•16 views

CVE-2022-1314

Type confusion in V8 in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.1AI score0.00937EPSS
SaveExploits1References5
Prion
Prion
•added 2022/07/23 12:15 a.m.•25 views

Type confusion

Type confusion in V8 in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.4AI score0.01856EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2022/07/04 12:00 a.m.•18 views

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc.V8 is an open source JavaScript engine. A resource management error vulnerability exists in Google Chrome that stems from the presence of a post-release reuse issue...

8.8CVSS8.1AI score0.01115EPSS
SaveExploits0References12
Positive Technologies
Positive Technologies
•added 2022/06/21 12:00 a.m.•2 views

PT-2022-3066

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 103.0.5060.53 Microsoft Edge affected versions not specified Description The issue is related to type confusion errors in the V8 engine of Google Chrome and Microsoft Edge browsers. This could allow a remote...

10CVSS0.01028EPSS
SaveExploits0
attackerkb
attackerkb
•added 2022/06/17 8:00 p.m.•15 views

CVE-2022-22138

All versions of package fast-string-search are vulnerable to Denial of Service DoS when computations are incorrect for non-string inputs. One can cause the V8 to attempt reading from non-permitted locations and cause a segmentation fault due to the violation...

7.5CVSS7.1AI score0.01212EPSS
SaveExploits1References2
CISA KEV Catalog
CISA KEV Catalog
•added 2022/06/08 12:00 a.m.•62 views

Google Chromium V8 Memory Corruption Vulnerability

Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera...

8.8CVSS8.6AI score0.40635EPSS
SaveIn wildExploits1
RedhatCVE
RedhatCVE
•added 2022/05/20 11:19 p.m.•55 views

CVE-2021-37975

Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS2.9AI score0.34887EPSS
SaveExploits0References1
Rows per page
Query Builder