Lucene search
+L

121 matches found

NVD
NVD
added 2022/04/05 12:15 a.m.24 views

CVE-2022-0605

Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS0.00578EPSS
SaveExploits0References2
OSV
OSV
added 2022/04/05 12:15 a.m.5 views

DEBIAN-CVE-2022-0605

Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.1AI score0.00578EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/05 12:15 a.m.12 views

CVE-2022-0605

Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9AI score
SaveExploits0References2
Prion
Prion
added 2022/04/05 12:15 a.m.28 views

Design/Logic Flaw

Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

6.8CVSS8.8AI score0.00578EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/04/05 12:15 a.m.8 views

UBUNTU-CVE-2022-0605

Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.3AI score0.00578EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2022/04/05 12:15 a.m.45 views

CVE-2022-0605

Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.2AI score0.00578EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2022/04/04 11:55 p.m.78 views

CVE-2022-0605

Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9.5AI score0.00578EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/04/04 11:55 p.m.89 views

CVE-2022-0605

Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS9AI score0.00578EPSS
SaveExploits0
Cvelist
Cvelist
added 2022/04/04 11:55 p.m.39 views

CVE-2022-0605

Use after free in Webstore API in Google Chrome prior to 98.0.4758.102 allowed an attacker who convinced a user to install a malicious extension and convinced a user to enage in specific user interaction to potentially exploit heap corruption via a crafted HTML page...

9.1AI score0.00578EPSS
SaveExploits0References2
CVE
CVE
added 2022/04/04 11:55 p.m.255 views

CVE-2022-0605

CVE-2022-0605 is a Chrome/Chromium vulnerability: a use-after-free in the Webstore API prior to 98.0.4758.102 could allow heap corruption when a user is convinced to install a malicious extension and to engage in specific interactions. The issue was addressed in the Chrome 98.0.4758.102 release. ...

8.8CVSS8.7AI score0.00578EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/02/25 12:00 a.m.11 views

The vulnerability of the Webstore API component of Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the Webstore API component for Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code through a specially created web page...

10CVSS8.1AI score0.00578EPSS
SaveExploits0References12Affected Software6
Tenable Nessus
Tenable Nessus
added 2022/02/22 12:00 a.m.68 views

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0042-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0042-1 advisory. - Use after free in File Manager. CVE-2022-0603 - Heap buffer overflow in Tab Groups. CVE-2022-0604 - Use after free in Webstore API...

8.8CVSS9AI score0.22933EPSS
SaveExploits0References18
Veracode
Veracode
added 2022/02/20 5:50 a.m.30 views

Use After Free

Google Chrome is vulnerable to use after free. The vulnerability exists in Webstore API which allows an attacker to cause a memory corruption...

8.8CVSS3.3AI score0.00578EPSS
SaveExploits0References3Affected Software2
Microsoft CVE
Microsoft CVE
added 2022/02/16 8:00 a.m.41 views

Chromium: CVE-2022-0605 Use after free in Webstore API

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

8.8CVSS8.4AI score0.00578EPSS
SaveExploits0
CNVD
CNVD
added 2022/02/16 12:00 a.m.80 views

Google Chrome Webstore API Code Execution Vulnerability

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in the Google Chrome Webstore API, which can be exploited by remote attackers to execute arbitrary code on a system or cause a denial of service condition...

8.8CVSS8.7AI score0.00578EPSS
SaveExploits0References1
ThreatPost
ThreatPost
added 2022/02/15 6:33 p.m.265 views

Chrome Zero-Day Under Active Attack: Patch ASAP

Google on Monday issued 11 security fixes for its Chrome browser, including a high-severity zero-day bug that’s actively being jumped on by attackers in the wild. In a brief update, Google described the weakness, tracked as CVE-2022-0609, as a use-after-free vulnerability in Chrome’s Animation...

9.6CVSS9.8AI score0.84173EPSS
SaveExploits16References23
The Hacker News
The Hacker News
added 2022/02/15 5:06 a.m.157 views

New Chrome 0-Day Bug Under Active Attack – Update Your Browser ASAP!

Google on Monday rolled out fixes for eight security issues in the Chrome web browser, including a high-severity vulnerability that's being actively exploited in real-world attacks, marking the first zero-day patched by the internet giant in 2022. The shortcoming, tracked CVE-2022-0609, is...

8.8CVSS1AI score0.22933EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/02/15 12:00 a.m.65 views

FreeBSD : chromium -- multiple vulnerabilities (e12432af-8e73-11ec-8bc4-3065ec8fd3ec)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the e12432af-8e73-11ec-8bc4-3065ec8fd3ec advisory. - Inappropriate implementation in Gamepad API in Google Chrome prior to 98.0.4758.102 allowed ...

8.8CVSS8.9AI score0.22933EPSS
SaveExploits0References10
Tenable Nessus
Tenable Nessus
added 2022/02/14 12:00 a.m.147 views

Google Chrome < 98.0.4758.102 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 98.0.4758.102. It is, therefore, affected by multiple vulnerabilities as referenced in the 202202stable-channel-update-for-desktop14 advisory. - Inappropriate implementation in Gamepad API in Google Chrome prior to...

8.8CVSS9AI score0.22933EPSS
SaveExploits0References17
FreeBSD
FreeBSD
added 2022/02/14 12:00 a.m.92 views

chromium -- multiple vulnerabilities

Chrome Releases reports: This release contains 11 security fixes, including: 1290008 High CVE-2022-0603: Use after free in File Manager. Reported by Chaoyuan Peng @ret2happy on 2022-01-22 1273397 High CVE-2022-0604: Heap buffer overflow in Tab Groups. Reported by Krace on 2021-11-24 1286940 High...

8.8CVSS0.22933EPSS
SaveExploits0References1
Rows per page
Query Builder