Lucene search
+L

2997 matches found

Zero Day Initiative
Zero Day Initiative
•added 2022/05/26 12:00 a.m.•37 views

Apple Safari WebGL generateMipmap Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple Safari. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the WebGL library. Th...

8.8CVSS2AI score0.01442EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/05/24 12:00 a.m.•1 views

PT-2022-7572

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 106 Firefox ESR versions prior to 102.6 Thunderbird versions prior to 102.6 Description The issue is related to an optimization in WebGL that was incorrect in some cases, potentially leading to memory corruption and a...

10CVSS0.00742EPSS
SaveExploits0References133
Talos
Talos
•added 2022/05/17 12:00 a.m.•42 views

NVIDIA nvwgf2umx_cfg.dll shader DCL_UNORDERED_ACCESS_VIEW_STRUCTURED memory corruption vulnerability

Summary A memory corruption vulnerability exists in the shader DCLUNORDEREDACCESSVIEWSTRUCTURED functionality of NVIDIA D3D10 Driver version 496.76, 30.0.14.9676. A specially-crafted executable / shader file can lead to memory corruption. This vulnerability potentially could be triggered from gue...

8.5CVSS8.6AI score0.01638EPSS
SaveExploits0
Talos
Talos
•added 2022/05/17 12:00 a.m.•43 views

NVIDIA nvwgf2umx_cfg.dll shader DCL_RESOURCE_STRUCTURED memory corruption vulnerability

Summary A memory corruption vulnerability exists in the shader DCLRESOURCESTRUCTURED functionality of NVIDIA D3D10 Driver, version 496.76, 30.0.14.9676. A specially-crafted executable/shader file can lead to an out-of-bounds write. This vulnerability potentially could be triggered from guest...

8.5CVSS8.4AI score0.01638EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/05/13 12:00 a.m.•15 views

The vulnerability in the API for 3D graphics in WebGL browsers like Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the API for 3D graphics in WebGL browsers like Google Chrome and Microsoft Edge is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

7.6CVSS7.2AI score0.00876EPSS
SaveExploits1References6Affected Software5
Tenable Nessus
Tenable Nessus
•added 2022/05/10 12:00 a.m.•48 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2022-0029)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities: - Further techniques that built on the slipstream research combined with a malicious webpage could have exposed both an internal network's hosts as...

8.8CVSS8.6AI score0.01756EPSS
SaveExploits1References27
Microsoft CVE
Microsoft CVE
•added 2022/04/28 3:54 p.m.•54 views

Chromium: CVE-2022-1482 Inappropriate implementation in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

6.5CVSS7.2AI score0.00876EPSS
SaveExploits1
Veracode
Veracode
•added 2022/04/28 2:00 p.m.•27 views

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to an Inappropriate implementation in WebGL which allows an attacker to cause an application crash...

6.5CVSS3.5AI score0.00876EPSS
SaveExploits1References4Affected Software2
Kaspersky
Kaspersky
•added 2022/04/28 12:00 a.m.•57 views

KLA12519 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free...

8.8CVSS7.7AI score0.01186EPSS
SaveExploits21References26
Positive Technologies
Positive Technologies
•added 2022/04/26 12:00 a.m.•2 views

PT-2022-2485

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.41 Microsoft Edge affected versions not specified Description The issue is related to an inappropriate implementation in WebGL, which is a 3D graphics API. This could allow a remote attacker to...

7.6CVSS0.00876EPSS
SaveExploits1
Kaspersky
Kaspersky
•added 2022/04/26 12:00 a.m.•561 views

KLA12517 Multiple vulnerabilities in Google Chrome

Multiple vulnerabilities were found in Google Chrome. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. Implementation vulnerability in Input can...

9.6CVSS7.7AI score0.01344EPSS
SaveExploits25References2
Positive Technologies
Positive Technologies
•added 2022/04/19 12:00 a.m.•3 views

PT-2022-2914

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 102.0.5005.115 Microsoft Edge affected versions not specified Description The issue is related to a double free in WebGL, which can lead to heap corruption. This can be exploited by a remote attacker using a...

10CVSS7AI score0.01047EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2022/04/14 12:00 a.m.•14 views

PT-2022-3955 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 103.0.5060.53 Description: The issue is related to a heap buffer overflow in the WebGL component of Google Chrome, which could be exploited by a remote attacker via a crafted HTML page, potentially leading to...

10CVSS7.5AI score0.70461EPSS
SaveExploits22References451
Check Point Advisories
Check Point Advisories
•added 2022/02/16 12:00 a.m.•18 views

Google Chrome WebGL Use After Free (CVE-2020-6492)

A use-after-free vulnerability exists in Google Chrome WebGL. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

6.8CVSS5AI score0.00722EPSS
SaveExploits1
The Hacker News
The Hacker News
•added 2022/01/31 3:38 p.m.•28 views

Your Graphics Card Fingerprint Can Be Used to Track Your Activities Across the Web

Researchers have demonstrated a new type of fingerprinting technique that exploits a machine's graphics processing unit GPU as a means to persistently track users across the web. Dubbed DrawnApart, the method "identifies a device from the unique properties of its GPU stack," researchers from...

6.8AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•30 views

Mageia: Security Advisory (MGASA-2018-0483)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.09646EPSS
SaveExploits0References5
OpenVAS
OpenVAS
•added 2022/01/28 12:00 a.m.•33 views

Mageia: Security Advisory (MGASA-2020-0170)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9.1AI score0.07063EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2022/01/01 12:00 a.m.•21 views

PT-2025-7997

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An incorrect initialization in the dcn31 validate bandwidth function within the drivers/gpu/drm/amd/display/dc/dcn31/dcn31 resource.c module of the AMD Direct Rendering Infrastructure DR...

5.5CVSS5.9AI score0.00261EPSS
SaveExploits0References22
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•31 views

Mozilla Firefox Security Advisory (MFSA2011-51) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

5CVSS9.6AI score0.01025EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/11/11 12:00 a.m.•20 views

Mozilla Firefox Security Advisory (MFSA2015-113) - Linux

This host is missing a security update for Mozilla Firefox. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; y...

7.5CVSS6.5AI score0.04184EPSS
SaveExploits0References4
Rows per page
Query Builder