CVE-2022-3887

Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

FreeBSD : chromium -- multiple vulnerabilities (6b04476f-601c-11ed-92ce-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 6b04476f-601c-11ed-92ce-3065ec8fd3ec advisory. - Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to...

CVE-2022-3887

Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2022-3887

Use-after-free in Web Workers in Google Chrome prior to 107.0.5304.106 (CVE-2022-3887) allows remote heap corruption via crafted HTML. Affected: Google Chrome/Web Workers. Root cause: use-after-free in Web Workers (Chromium). Impact: High severity per Chrome/NVD. Remediation: Chrome Stable channe...

CVE-2022-3887

Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2022-3887

Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

KLA20038 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. Type confusion vulnerability in V8 can be exploited to cause denial of service. 2. Use after...

Google Chrome < 107.0.5304.110 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 107.0.5304.110. It is, therefore, affected by multiple vulnerabilities as referenced in the 202211stable-channel-update-for-desktop advisory. - Heap buffer overflow in Crashpad in Google Chrome on Android prior to...

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 10 security fixes, including: 1377816 High CVE-2022-3885: Use after free in V8. Reported by gzobqq@ on 2022-10-24 1372999 High CVE-2022-3886: Use after free in Speech Recognition. Reported by anonymous on 2022-10-10 1372695 High CVE-2022-3887: Use...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. A security vulnerability exists in Google Chrome, which stems from a post-release memory reuse issue in Web Workers. No details of the vulnerability are currently available...

Malicious code in web-workers-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fc73f2f65b2059ef309faa11b6584e8f751fcf4b197194d4fe1297ccf1875ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7079 Malicious code in web-workers-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1fc73f2f65b2059ef309faa11b6584e8f751fcf4b197194d4fe1297ccf1875ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-7080 Malicious code in web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe40b6f18c92d30d2bc1d2dcf526a32b6db3894488c7ba9b412274573bdf4946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe40b6f18c92d30d2bc1d2dcf526a32b6db3894488c7ba9b412274573bdf4946 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in samples-web-workers-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6ab462c57154f38ea0e59c31fbae08a177f4bfb366e428cba103161237fa8efa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Ubuntu 18.04 LTS / 20.04 LTS : Thunderbird vulnerabilities (USN-5345-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5345-1 advisory. Multiple security issues were discovered in Thunderbird. If a user were tricked into opening a specially crafted website in a browsing contex...

AlmaLinux 8 : firefox (ALSA-2022:0510)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:0510 advisory. - Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firefox ESR 91.5. Some of these bugs...

AlmaLinux 8 : thunderbird (ALSA-2022:0535)

The remote AlmaLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ALSA-2022:0535 advisory. - Mozilla developers Paul Adenot and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 96 and Firefox ESR 91.5. Some of these bugs...

SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2022:0696-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0696-1 advisory. - A Time-of-Check Time-of-Use bug existed in the Maintenance Updater Service that could be abused to grant Use...

SUSE SLES15 Security Update : MozillaFirefox (SUSE-SU-2022:0676-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0676-1 advisory. - A Time-of-Check Time-of-Use bug existed in the Maintenance Updater Service that could be abused to grant Users write access to an...