Lucene search
K

593 matches found

OSV
OSV
added 2022/12/22 8:15 p.m.9 views

CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

9.6CVSS8.9AI score0.02349EPSS
Exploits1References3
NVD
NVD
added 2022/12/22 8:15 p.m.22 views

CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

9.6CVSS0.02349EPSS
Exploits1References3
Prion
Prion
added 2022/12/22 8:15 p.m.37 views

Design/Logic Flaw

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

6.8CVSS8.5AI score0.02349EPSS
Exploits1References2Affected Software4
Cvelist
Cvelist
added 2022/12/22 12:0 a.m.30 views

CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

8.9AI score0.02349EPSS
Exploits1References2
Vulnrichment
Vulnrichment
added 2022/12/22 12:0 a.m.5 views

CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

8.8AI score0.02349EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/12/22 12:0 a.m.59 views

CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

9.6CVSS8.9AI score0.02349EPSS
In wildExploits1References3
CVE
CVE
added 2022/12/22 12:0 a.m.1561 views

CVE-2022-26486

CVE-2022-26486 describes a use-after-free in the WebGPU IPC framework leading to a sandbox escape. Affected products and versions (per connected docs): Firefox < 97.0.2; Firefox ESR < 91.6.1; Firefox for Android < 97.3.0; Thunderbird < 91.6.2; Focus

9.6CVSS8.8AI score0.02349EPSS
In wildExploits1References3Affected Software3
AlpineLinux
AlpineLinux
added 2022/12/22 12:0 a.m.41 views

CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

9.6CVSS9.1AI score0.02349EPSS
Exploits1
Debian CVE
Debian CVE
added 2022/12/22 12:0 a.m.99 views

CVE-2022-26486

An unexpected message in the WebGPU IPC framework could lead to a use-after-free and exploitable sandbox escape. We have had reports of attacks in the wild abusing this flaw. This vulnerability affects Firefox 97.0.2, Firefox ESR 91.6.1, Firefox for Android 97.3.0, Thunderbird 91.6.2, and Focus...

9.6CVSS9.1AI score0.02349EPSS
Exploits1
Veracode
Veracode
added 2022/08/13 8:14 a.m.40 views

Denial Of Service (DoS)

chrome is vulnerable to denial of service. The vulnerability exists due to a use after free in WebGPU in Google Chrome allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.6AI score0.00605EPSS
Exploits1References3Affected Software2
ATTACKERKB
ATTACKERKB
added 2022/07/28 10:15 p.m.3 views

CVE-2022-2399

Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS5.9AI score0.00605EPSS
Exploits1References3
OSV
OSV
added 2022/07/28 10:15 p.m.1 views

DEBIAN-CVE-2022-2399

Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.2AI score0.00605EPSS
Exploits1References1
OSV
OSV
added 2022/07/28 10:15 p.m.26 views

CVE-2022-2399

Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS6.7AI score
Exploits0References2
NVD
NVD
added 2022/07/28 10:15 p.m.18 views

CVE-2022-2399

Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.00605EPSS
Exploits1References2
Prion
Prion
added 2022/07/28 10:15 p.m.27 views

Design/Logic Flaw

Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.9AI score0.00605EPSS
Exploits1References2Affected Software1
OSV
OSV
added 2022/07/28 10:15 p.m.1 views

UBUNTU-CVE-2022-2399

Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS5.8AI score0.00605EPSS
Exploits1References4
UbuntuCve
UbuntuCve
added 2022/07/28 10:15 p.m.33 views

CVE-2022-2399

Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00605EPSS
Exploits1References3
CVE
CVE
added 2022/07/28 9:35 p.m.84 views

CVE-2022-2399

CVE-2022-2399 : Affected software is Google Chrome with WebGPU; the issue is a use-after-free in WebGPU that allows a remote attacker to cause heap corruption via a crafted HTML page. Product: Chrome (WebGPU component); root cause: use-after-free in WebGPU implementation; impact: potential heap c...

8.8CVSS8.9AI score0.00605EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/07/28 9:35 p.m.28 views

CVE-2022-2399

Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

9.3AI score0.00605EPSS
Exploits1References2
Debian CVE
Debian CVE
added 2022/07/28 9:35 p.m.44 views

CVE-2022-2399

Use after free in WebGPU in Google Chrome prior to 100.0.4896.88 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9AI score0.00605EPSS
Exploits1
Rows per page
Query Builder