USN-5284-1: Firefox vulnerabilities

Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass security restrictions, obtain sensitive information, or execute arbitrary code. CVE-2022-0511,...

Important: Red Hat Security Advisory: firefox security update

An update for firefox is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

ALSA-2022:0510 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 91.6.0 ESR. Security Fixes: Mozilla: Extensions could have bypassed permission confirmation during update CVE-2022-22754 Mozilla: Memory safety...

[SECURITY] Fedora 35 Update: firefox-97.0-1.fc35

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-44715)

Google Chrome is a web browser from Google, Inc. that is vulnerable to a resource management error. A remote attacker could use this vulnerability to convince a user to engage in a specific user interaction, which could potentially exploit heap corruption via user interaction...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-45570)

Google Chrome is a web browser from Google, Inc. A security feature vulnerability exists in versions of Google Chrome prior to 98.0.4758.80, which can be exploited by remote attackers to compromise cross-domain data via crafted HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-44719)

Google Chrome is a web browser from Google, Inc. that is vulnerable to a resource management error. A remote attacker who has compromised the renderer process can exploit this vulnerability to potentially exploit heap corruption via a carefully crafted HTML page...

Microsoft Edge (Chromium) < 98.0.1108.50 Vulnerability

The version of Microsoft Edge installed on the remote Windows host is prior to 98.0.1108.50. It is, therefore, affected by a vulnerability as referenced in the February 10, 2022 advisory. - Microsoft Edge Chromium-based Spoofing Vulnerability CVE-2022-23264 Note that Nessus has not tested for thi...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-45571)

Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in versions of Google Chrome prior to 98.0.4758.80, which could be exploited by remote attackers to convince users to engage in certain user interactions that could potentially exploit heap corruptio...

Google Chrome Buffer Overflow Vulnerability (CNVD-2022-45563)

Google Chrome is a web browser from Google, Inc. A buffer overflow vulnerability exists in Google Chrome. A remote attacker could exploit this vulnerability to potentially exploit heap corruption via a carefully crafted HTML page...

Google Chrome Input Validation Error Vulnerability (CNVD-2022-45564)

Google Chrome is a web browser from Google, Inc. An input validation error vulnerability exists in Google Chrome, which could be exploited by remote attackers to spoof the contents of the multi-function box URL bar via a crafted HTML page...

Microsoft Edge (Chromium-based) 篡改漏洞（CNVD-2022-60124）

Microsoft Edge is a web browser that comes with versions of Windows 10 and later. Microsoft Edge Chromium-based is vulnerable to a tampering vulnerability that could be exploited by attackers to compromise integrity...

Debian: Security Advisory (DLA-2916-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Google Chrome Security Feature Issue Vulnerability (CNVD-2022-45573)

Google Chrome is a web browser from Google, Inc. A security feature vulnerability exists in versions of Google Chrome prior to 98.0.4758.80, which can be exploited by remote attackers to bypass navigation restrictions via carefully designed HTML pages...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-45572)

Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in versions of Google Chrome prior to 98.0.4758.80, which can be exploited by remote attackers to potentially exploit heap corruption via user interaction...

Google Chrome Resource Management Error Vulnerability (CNVD-2022-44720)

Google Chrome is a web browser from Google, Inc. A resource management error vulnerability exists in Google Chrome, which can be exploited by remote attackers to potentially exploit heap corruption by corrupting configuration files...

Google Chrome Type Obfuscation Vulnerability (CNVD-2022-45565)

Google Chrome is a web browser from Google, Inc. A type obfuscation vulnerability exists in Google Chrome, which can be exploited by remote attackers to potentially exploit heap corruption via well-designed HTML pages...

[SECURITY] [DLA 2916-1] firefox-esr security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2916-1 [email protected] https://www.debian.org/lts/security/ Emilio Pozuelo Monfort February 09, 2022 https://wiki.debian.org/LTS -...

Vulnerability Spotlight: Use-after-free in Google Chrome could lead to code execution

Marcin Towalski of Cisco Talos discovered this vulnerability. Blog by Jon Munshaw. Cisco Talos recently discovered an exploitable use-after-free vulnerability in Google Chrome. Google Chrome is a cross-platform web browser — and Chromium is the open-source version of the browser... This is only t...

Schneider Electric PowerLogic PM5560 Improper Neutralization of Input During Web Page Generation (CVE-2018-7795)

A Cross Protocol Injection vulnerability exists in Schneider Electric's PowerLogic PM5560 prior to FW version 2.5.4 product. The vulnerability makes the product susceptible to cross site scripting attack on its web browser. User inputs can be manipulated to cause execution of java script code. Th...