6912 matches found
FreeBSD : chromium -- multiple vulnerabilities (1567be8c-0a15-11ee-8290-a8a1599412c6)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 1567be8c-0a15-11ee-8290-a8a1599412c6 advisory. - Use after free in Autofill payments in Google Chrome prior to 114.0.5735.133 allowed a remot...
Google Chrome 安全漏洞
Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome V8, which is caused due to type obfuscation in the V8 component, and can be exploited by an attacker to execute arbitrary code on a system or cause an application to crash...
PT-2023-3629 · Google +2 · Google Chrome +2
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.133 Description: The issue is related to a type confusion in the V8 JavaScript engine, which can lead to heap corruption. A remote attacker could potentially exploit this issue via a crafted HTML pag...
Google Chrome < 114.0.5735.133 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 114.0.5735.133. It is, therefore, affected by multiple vulnerabilities as referenced in the 202306stable-channel-update-for-desktop13 advisory. - Use after free in WebXR in Google Chrome prior to 114.0.5735.133 allowed a...
chromium -- multiple vulnerabilities
Chrome Releases reports: This update includes 5 security fixes: 1450568 Critical CVE-2023-3214: Use after free in Autofill payments. Reported by Rong Jian of VRI on 2023-06-01 1446274 High CVE-2023-3215: Use after free in WebRTC. Reported by asnine on 2023-05-17 1450114 High CVE-2023-3216: Type...
openSUSE 15 Security Update : chromium (openSUSE-SU-2023:0124-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0124-1 advisory. - Out of bounds write in Swiftshader in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via...
Update Chrome now! Google patches actively exploited zero-day
Google has released an update which includes two security fixes. One of these security fixes is for a zero-day about which Google says its aware that an exploit for this vulnerability exists in the wild. How to protect yourself If youre a Chrome user on Windows, Mac, or Linux, you should update a...
Google Addresses High-Stakes Chrome Zero-Day Vulnerability
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Google tackles Chromes zero-day CVE-2023-3079 vulnerability, which is related to a weakness in the Chrome V8 JavaScript engine. It poses a significant threat by allowing attackers to execute...
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-3079 Google Chromium V8 Type Confusion Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant...
Denial Of Service (DoS)
Google Chrome is vulnerable to Denial Of Service DoS. The vulnerability exists due to the type confusion in V8, which allows an attacker to exploit heap corruption via a crafted HTML page, leading to an application crash...
SUSE CVE-2023-3079
Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
FreeBSD : chromium -- multiple vulnerabilities (12741b1f-04f9-11ee-8290-a8a1599412c6)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 12741b1f-04f9-11ee-8290-a8a1599412c6 advisory. - Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentiall...
CVE-2023-33538
The CVE-2023-33538 issue affects TP-Link TL-WR940N (V2/V4), TL-WR841N (V8/V10), and TL-WR740N (V1/V2) routers. Root cause: command injection in the WlanNetworkRpm.htm endpoint under /userRpm/WlanNetworkRpm, exploitably via the ssid1 parameter; authenticated access is required for exploitation (pe...
TP-Link wireless router 命令注入漏洞
The TP-LINK TL-WR940N is a wireless router from China P&L TP-LINK. A security vulnerability exists in the TP-Link wireless router, which stems from a discovery via the /userRpm/WlanNetworkRpm component that contains a command injection vulnerability. Affected products and versions: TP-Link...
Microsoft Edge (Chromium) < 114.0.1823.41 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 114.0.1823.41. It is, therefore, affected by multiple vulnerabilities as referenced in the June 6, 2023 advisory. - Type confusion in V8 in Google Chrome prior to 114.0.5735.110 allowed a remote attacker to potentially...
Google Chromium V8 Type Confusion Vulnerability
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge...
Chromium: CVE-2023-3079 Type Confusion in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-3079 exists in the wild...
Zero-Day Alert: Google Issues Patch for New Chrome Vulnerability - Update Now!
Google on Monday released security updates to patch a high-severity flaw in its Chrome web browser that it said is being actively exploited in the wild. Tracked as CVE-2023-3079, the vulnerability has been described as a type confusion bug in the V8 JavaScript engine. Clement Lecigne of Google's...
Zero-Day Alert: Google Issues Patch for New Chrome Vulnerability - Update Now!
Google on Monday released security updates to patch a high-severity flaw in its Chrome web browser that it said is being actively exploited in the wild. Tracked as CVE-2023-3079 , the vulnerability has been described as a type confusion bug in the V8 JavaScript engine. Clement Lecigne of Google's...
