Lucene search
+L

2619 matches found

Apple
Apple
added 2023/10/04 12:00 a.m.90 views

About the security content of iOS 17.0.3 and iPadOS 17.0.3

About the security content of iOS 17.0.3 and iPadOS 17.0.3 This document describes the security content of iOS 17.0.3 and iPadOS 17.0.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

8.8CVSS9.3AI score0.49013EPSS
SaveExploits3References1Affected Software2
Tenable Nessus
Tenable Nessus
added 2023/09/30 12:00 a.m.43 views

GLSA-202309-17 : Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202309-17 Chromium, Google Chrome, Microsoft Edge: Multiple Vulnerabilities - Type confusion in V8 in Google Chrome prior to 110.0.5481.77 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

9.8CVSS8.2AI score0.40798EPSS
SaveExploits2References78
Apple
Apple
added 2023/09/26 12:00 a.m.445 views

About the security content of Safari 17

About the security content of Safari 17 This document describes the security content of Safari 17. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

9.8CVSS9.4AI score0.29179EPSS
SaveExploits3References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/09/12 12:00 a.m.9 views

PT-2023-9327 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 117.0.5938.62 Description: The issue is related to a use after free in WebRTC, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could impact the confidentiality,...

10CVSS6.8AI score0.00723EPSS
SaveExploits4References52
OSV
OSV
added 2023/08/31 4:54 p.m.24 views

RLSA-2023:4063 Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 102.13.0. Security Fixes: Mozilla: Use-after-free in WebRTC certificate generation CVE-2023-37201 Mozilla: Potential use-after-free from compartment mismatch in SpiderMonkey CVE-2023-37202...

8.8CVSS8.8AI score0.00755EPSS
SaveExploits0References6
OSV
OSV
added 2023/08/31 4:54 p.m.33 views

RLSA-2023:4076 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 102.13.0 ESR. Security Fixes: Mozilla: Use-after-free in WebRTC certificate generation CVE-2023-37201 Mozilla: Potential use-after-free from...

8.8CVSS8.8AI score0.00755EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2023/08/24 12:00 a.m.47 views

FreeBSD : electron25 -- multiple vulnerabilities (5999fc39-72d0-4b99-851c-ade7ff7125c3)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 5999fc39-72d0-4b99-851c-ade7ff7125c3 advisory. - Type Confusion in V8 in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to...

8.8CVSS8.7AI score0.27695EPSS
SaveExploits0References25
OpenVAS
OpenVAS
added 2023/08/09 12:00 a.m.38 views

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Aug 2023)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

8.8CVSS8.6AI score0.24918EPSS
SaveExploits0References2
Microsoft CVE
Microsoft CVE
added 2023/08/07 7:00 a.m.25 views

Chromium: CVE-2023-4076 Use after free in WebRTC

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.5AI score0.00924EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/08/07 12:00 a.m.39 views

FreeBSD : electron{22,23,24,25} -- multiple vulnerabilities (f3a35fb8-2d70-47c9-a516-6aad7eb222b1)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f3a35fb8-2d70-47c9-a516-6aad7eb222b1 advisory. - Use after free in WebRTC in Google Chrome prior to 115.0.5790.98 allowed a remote attacker t...

8.8CVSS8.2AI score0.01039EPSS
SaveExploits2References7
Veracode
Veracode
added 2023/08/06 11:40 p.m.23 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the WebRTC of the library, which allows an attacker to perform a sandbox escape via a maliciously crafted HTML page through the renderer process...

9.6CVSS6.7AI score0.00662EPSS
SaveExploits1References4Affected Software1
Veracode
Veracode
added 2023/08/06 9:50 p.m.28 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in lack of validate WebRTC connection over HTTPS, which can result in Denial of Service...

8.8CVSS6.9AI score0.00755EPSS
SaveExploits0References9Affected Software3
Veracode
Veracode
added 2023/08/06 11:58 a.m.28 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the WebRTC, allowing an attacker to cause heap corruption via a crafted WebRTC session...

8.8CVSS7AI score0.00924EPSS
SaveExploits0References8Affected Software2
Veracode
Veracode
added 2023/08/06 7:12 a.m.28 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the WebRTC, which allows an attacker to cause heap corruption via a maliciously crafted HTML page...

8.8CVSS6.9AI score0.00707EPSS
SaveExploits1References5Affected Software1
Veracode
Veracode
added 2023/08/06 7:12 a.m.24 views

Use After Free

chromium is vulnerable to Use After Free. The vulnerability exists in the WebRTC, which allows an attacker to cause heap corruption via a maliciously crafted HTML page...

8.8CVSS6.9AI score0.00694EPSS
SaveExploits1References5Affected Software1
CNVD
CNVD
added 2023/08/06 12:00 a.m.33 views

Google Chrome Code Execution Vulnerability (CNVD-2023-63470)

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a code execution vulnerability that is due to free usage in WebRTC. An attacker can exploit the vulnerability to execute arbitrary code on a system or cause an application to crash...

8.8CVSS8AI score0.00924EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2023/08/04 2:05 a.m.5 views

SUSE CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

8.8CVSS9.3AI score0.00924EPSS
SaveExploits0References5
OSV
OSV
added 2023/08/03 1:15 a.m.8 views

DEBIAN-CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

8.8CVSS8.2AI score0.00924EPSS
SaveExploits0References1
NVD
NVD
added 2023/08/03 1:15 a.m.24 views

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

8.8CVSS8.9AI score0.00924EPSS
SaveExploits0References7
OSV
OSV
added 2023/08/03 1:15 a.m.21 views

CVE-2023-4076

Use after free in WebRTC in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted WebRTC session. Chromium security severity: High...

8.8CVSS6.2AI score
SaveExploits0References7
Rows per page
Query Builder