6830 matches found
chromium -- multiple security fixes
Chrome Releases reports: This update includes 9 security fixes: 1501326 High CVE-2023-6702: Type Confusion in V8. Reported by Zhiyi Zhang and Zhunki from Codesafe Team of Legendsec at Qi'anxin Group on 2023-11-10 1502102 High CVE-2023-6703: Use after free in Blink. Reported by Cassidy...
Google Chrome < 120.0.6099.109 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 120.0.6099.109. It is, therefore, affected by multiple vulnerabilities as referenced in the 202312stable-channel-update-for-desktop12 advisory. - Use after free in CSS in Google Chrome prior to 120.0.6099.109 allowed a...
PT-2023-8336 · Google +5 · Google Chrome +6
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.224 Microsoft Edge versions affected versions not specified Description: The issue is related to a type confusion in the V8 JavaScript engine, which can be exploited by a remote attacker to potential...
CVE-2023-41983
The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.1, Safari 17.1, iOS 16.7.2 and iPadOS 16.7.2, iOS 17.1 and iPadOS 17.1. Processing web content may lead to a denial-of-service...
CVE-2023-47580
Multiple improper restriction of operations within the bounds of a memory buffer issues exist in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file X1, V8, or V9 file, information may be disclosed and/or arbitrary code may be executed...
CVE-2023-47581
Out-of-bounds read vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file X1, V8, or V9 file, information may be disclosed and/or arbitrary code may be executed...
CVE-2023-47581
Out-of-bounds read vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file X1, V8, or V9 file, information may be disclosed and/or arbitrary code may be executed...
PT-2023-7689 · Google +4 · Google Chrome +5
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.109 Description: The issue is related to a type confusion in the V8 JavaScript engine, which can be exploited by a remote attacker using a specially crafted HTML page, potentially leading to heap...
PT-2023-6869 · Tellus +1 · Tellus +1
Name of the Vulnerable Software and Affected Versions: TELLUS versions 4.0.17.0 and earlier TELLUS Lite versions 4.0.17.0 and earlier Description: The issue is related to improper restriction of operations within the bounds of a memory buffer. If a user opens a specially crafted file, such as X1,...
Fedora 39 : chromium (2023-0b39dc9302)
The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-0b39dc9302 advisory. update to 118.0.5993.117. Security release for CVE-2023-5472 ---- Update to 118.0.5993.88 ---- Update to 118.0.5993.70. Include following security...
Google Chrome Security Update (stable-channel-update-for-desktop_13-2017-11) - Windows
Google Chrome is prone to an Out of bounds read vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...
Google Chrome Security Update (stable-channel-update-for-desktop_13-2017-11) - Linux
Google Chrome is prone to an Out of bounds read vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...
Malicious code in data-layer-v8 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e4c8f846b0ddb1097d47c477e40c0ce16ee83df9e0e4d2ad331a6f638a0c0e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-8314 Malicious code in data-layer-v8 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e4c8f846b0ddb1097d47c477e40c0ce16ee83df9e0e4d2ad331a6f638a0c0e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Type Confusion
chromium is vulnerable to Type Confusion. This vulnerability could allow an attacker to execute arbitrary code on a victim's computer by exploiting a flaw in the V8 JavaScript engine. The impact of this vulnerability is high, as it can be exploited by attackers to steal sensitive data, take contr...
openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0292-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2023:0292-1 advisory. - Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
DEBIAN-CVE-2023-5346
Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
CVE-2023-5346
Type confusion in V8 in Google Chrome prior to 117.0.5938.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...