Lucene search
+L

904 matches found

Positive Technologies
Positive Technologies
•added 2022/05/17 12:00 a.m.•1 views

PT-2022-2912

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 102.0.5005.115 Microsoft Edge affected versions not specified Description The issue is related to a use after free in WebGPU, which could allow a remote attacker to potentially exploit heap corruption via a...

10CVSS0.01018EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/05/13 12:00 a.m.•16 views

The vulnerability in the API for working with computer graphics in WebGPU browsers like Google Chrome and Microsoft Edge allows attackers to execute arbitrary code.

The vulnerability of the API for working with computer graphics in WebGPU browsers like Google Chrome and Microsoft Edge is due to a buffer overflow in the dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

10CVSS8.7AI score0.01186EPSS
SaveExploits1References6Affected Software5
OpenVAS
OpenVAS
•added 2022/05/03 12:00 a.m.•78 views

Mageia: Security Advisory (MGASA-2022-0158)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS6.7AI score0.01186EPSS
SaveExploits23References4
Microsoft CVE
Microsoft CVE
•added 2022/04/28 3:54 p.m.•61 views

Chromium: CVE-2022-1483 Heap buffer overflow in WebGPU

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS7.7AI score0.01186EPSS
SaveExploits1
Veracode
Veracode
•added 2022/04/28 2:00 p.m.•32 views

Denial Of Service (DoS)

chromium is vulnerable to denial of service. An attacker can cause an application crash through the heap buffer overflow in WebGPU...

8.8CVSS8AI score0.01186EPSS
SaveExploits1References4Affected Software2
Kaspersky
Kaspersky
•added 2022/04/28 12:00 a.m.•57 views

KLA12519 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, bypass security restrictions, gain privileges, spoof user interface. Below is a complete list of vulnerabilities: 1. Use after free...

8.8CVSS7.7AI score0.01186EPSS
SaveExploits21References26
OpenVAS
OpenVAS
•added 2022/04/27 12:00 a.m.•20 views

Mozilla Firefox Security Advisory (MFSA2022-09) - Linux

The remote host is missing an update for Mozilla Firefox, announced via the advisory MFSA2022-09. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-on...

9.6CVSS7.5AI score0.14261EPSS
SaveExploits2References6
Positive Technologies
Positive Technologies
•added 2022/04/26 12:00 a.m.•2 views

PT-2022-2484

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 101.0.4951.41 Microsoft Edge affected versions not specified Description The issue is caused by a heap buffer overflow in the WebGPU API, which can be exploited by a remote attacker who has compromised the...

10CVSS0.01186EPSS
SaveExploits1
FreeBSD
FreeBSD
•added 2022/04/26 12:00 a.m.•100 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 30 security fixes, including: 1313905 High CVE-2022-1477: Use after free in Vulkan. Reported by SeongHwan Park SeHwa on 2022-04-06 1299261 High CVE-2022-1478: Use after free in SwiftShader. Reported by SeongHwan Park SeHwa on 2022-02-20 1305190 High...

8.8CVSS7.1AI score0.01186EPSS
SaveExploits23References1
Positive Technologies
Positive Technologies
•added 2022/04/11 12:00 a.m.•8 views

PT-2022-3689 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 100.0.4896.88 Description: The issue is related to a use after free in WebGPU, which can potentially allow a remote attacker to exploit heap corruption via a crafted HTML page. This could enable the attacker to...

9.7CVSS8AI score0.24726EPSS
SaveExploits73References410
Tenable Nessus
Tenable Nessus
•added 2022/03/29 12:00 a.m.•64 views

CentOS 7 : thunderbird (RHSA-2022:0850)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0850 advisory. - It may be possible for an attacker to craft an email message that causes Thunderbird to perform an out-of- bounds write of one byte when processing t...

9.8CVSS7.6AI score0.34174EPSS
SaveExploits7References12
Tenable Nessus
Tenable Nessus
•added 2022/03/29 12:00 a.m.•292 views

CentOS 7 : firefox (RHSA-2022:0824)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:0824 advisory. - xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a...

9.8CVSS7.6AI score0.34174EPSS
SaveExploits7References11
Tenable Nessus
Tenable Nessus
•added 2022/03/22 12:00 a.m.•52 views

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2022:0804-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0804-1 advisory. Mozilla Thunderbird 91.6.2 bsc1196809: - CVE-2022-26485: Use-after-free in XSLT parameter processing -...

9.6CVSS7.5AI score0.14261EPSS
SaveExploits2References6
ALT Linux
ALT Linux
•added 2022/03/15 12:00 a.m.•145 views

Security fix for the ALT Linux 10 package thunderbird version 91.6.2-alt1

91.6.2-alt1 built March 15, 2022 Pavel Vasenkov in task 296375 March 8, 2022 Pavel Vasenkov - New version. - Security fixes: + CVE-2022-26485 Use-after-free in XSLT parameter processing + CVE-2022-26486 Use-after-free in WebGPU IPC Framework...

8.9AI score0.14261EPSS
SaveExploits2
RedHat Linux
RedHat Linux
•added 2022/03/14 10:48 a.m.•19 views

Mozilla: Use-after-free in WebGPU IPC Framework

An unexpected message in the WebGPU IPC framework could lead to an exploitable sandbox escape and a use-after-free issue. An attacker with enough privileges could exploit this flaw leading to a complete system compromise...

9.6CVSS7.4AI score0.02351EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/03/14 10:30 a.m.•17 views

Mozilla: Use-after-free in WebGPU IPC Framework

An unexpected message in the WebGPU IPC framework could lead to an exploitable sandbox escape and a use-after-free issue. An attacker with enough privileges could exploit this flaw leading to a complete system compromise...

9.6CVSS7.4AI score0.02351EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/03/14 10:16 a.m.•11 views

Mozilla: Use-after-free in WebGPU IPC Framework

An unexpected message in the WebGPU IPC framework could lead to an exploitable sandbox escape and a use-after-free issue. An attacker with enough privileges could exploit this flaw leading to a complete system compromise...

9.6CVSS7.4AI score0.02351EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/03/14 10:09 a.m.•12 views

Mozilla: Use-after-free in WebGPU IPC Framework

An unexpected message in the WebGPU IPC framework could lead to an exploitable sandbox escape and a use-after-free issue. An attacker with enough privileges could exploit this flaw leading to a complete system compromise...

9.6CVSS7.4AI score0.02351EPSS
SaveExploits1References6
RedHat Linux
RedHat Linux
•added 2022/03/14 10:07 a.m.•8 views

Mozilla: Use-after-free in WebGPU IPC Framework

An unexpected message in the WebGPU IPC framework could lead to an exploitable sandbox escape and a use-after-free issue. An attacker with enough privileges could exploit this flaw leading to a complete system compromise...

9.6CVSS7.4AI score0.02351EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2022/03/14 12:00 a.m.•66 views

Oracle Linux 8 : thunderbird (ELSA-2022-0845)

The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-0845 advisory. 91.7.0-2.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 91.7.0-2 - Update to 91.7.0 build2 91.7.0-1 - Upda...

9.8CVSS7.4AI score0.34174EPSS
SaveExploits7References12
Rows per page
Query Builder