548 matches found
CVE-2026-2964-Lab
CVE‑2026‑2964 Lab – 프로토타입 오염Prototype Pollution에서 RCE까지 이 저장소는 web‑audio‑recorder‑js 라이브러리의 프로토타입 오염 취약점인 CVE‑2026‑2964에 대한 완전한 실습 환경을 포함하며, 특정 조건에서 원격 코드 실행RCE으로 이어질 수 있습니다. 이 실습에는 다음이 포함됩니다: 공격 체인을 시연하는 취약한 서버index-vulnerable.js 적절한 살균sanitisation 및 허용 목록allowlist 검증을 구현한 수정된 서버index-fixed.js...
Astra Linux – Vulnerability in Chromium
In WebAudio, a vulnerability existed before version 95.0.4638.54 that allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. This vulnerability was addressed with the release of version 95.0.4638.54...
Astra Linux – Vulnerability in Firefox
Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12...
GHSA-G538-2VJJ-8JX9 vulnerabilities
Vulnerabilities for packages: chromium...
Astra Linux – Vulnerability in Firefox and Thunderbird
Incorrect boundary conditions in the Web Audio component. This vulnerability was fixed in Firefox 148, Firefox ESR 115.33, Firefox ESR 140.8, Thunderbird 148, and Thunderbird 140.8...
Astra Linux – Vulnerability in Chromium
The use of after-free in WebAudio in Google Chrome before version 136.0.7103.92 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
A heap buffer overflow in the Web Audio API in Google Chrome prior to version 111.0.5563.64 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: Medium...
Astra Linux – Vulnerability in Chromium
The use of after-free in WebAudio in Google Chrome before version 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
Astra Linux – Vulnerability in Chromium
The use of after-free in Web Audio in Google Chrome before version 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page. Chromium security severity: High...
CVE-2026-74961
A flaw was found in Firefox and Thunderbird. The Mozilla Foundation's Security Advisory describes the following issue: Side-channel in the Web Audio component...
SUSE CVE-2026-74961
Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
Linux Distros Unpatched Vulnerability : CVE-2026-74961
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1. CVE-2026-74961...
CVE-2026-74961
Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
UBUNTU-CVE-2026-74961
Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
CVE-2026-74961
Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
CVE-2026-74961
Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
CVE-2026-74961
CVE-2026-74961 is a side-channel vulnerability in the Web Audio component of Mozilla Firefox and Thunderbird. It is rated CVSS 9.1 (Critical) with a network attack vector requiring no privileges or user interaction, and high impact on both confidentiality and integrity. The flaw allows an attacke...
CVE-2026-74961 Side-channel in the Web Audio component
Side-channel in the Web Audio component. This vulnerability was fixed in Firefox 154, Firefox ESR 153.1, Thunderbird 154, and Thunderbird 153.1...
