Google Chrome DoS

The vulnerability of Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Google Chrome GPU DoS

The vulnerability of Google Chrome’s GPU component is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

Mozilla Firefox JIT Compiler Use-After-Free

The vulnerability of the JIT-compiler of Mozilla Firefox relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

.NET Framework Insufficient Data Authenticity Verification

Vulnerabilities of .NET software platforms and the Microsoft .NET Framework are related to insufficient validation of data authenticity. Exploitation of these vulnerabilities can allow attackers to bypass existing security mechanisms remotely...

Microsoft SQL Server Privilege Escalation

The vulnerability of the Microsoft SQL Server database management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability can allow an attacker to enhance their privileges remotely...

dedoc/scramble Package Code Execution

The vulnerability of the dedoc/scramble package for the Laravel PHP framework is related to incorrect code generation practices. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome GPU DoS

The vulnerability of Google Chrome’s GPU component is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Google Chrome Media Code Execution

The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Chrome GPU Code Execution

The vulnerability of Google Chrome’s GPU component is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

component Google Chrome Code Execution

The vulnerability of the Accessibility component in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Chrome Fullscreen Spoofing

The vulnerability of Google Chrome’s fullscreen mode is related to errors in information representation by the user interface. Exploiting this vulnerability can allow a remote attacker to perform spoofing attacks...

Google Chrome V8 Engine Code Execution

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

gix_worktree_state checkout Code Execution

The vulnerability of the gixworktreestate::checkout function in the Rust library for working with Git repositories like gitoxide is related to an incorrect definition of symbolic references before accessing files. Exploiting this vulnerability could allow a remote attacker to execute arbitrary co...

Mozilla Firefox WebAssembly Data Compromise

JavaScript component vulnerability: Mozilla Firefox’s WebAssembly browser is vulnerable due to the possibility of using memory after it is freed. Exploiting this vulnerability could allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information...

Google Chrome FileSystem DoS

The vulnerability of Google Chrome’s FileSystem component is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Google Chrome Downloads Spear Phishing

The vulnerability of the Downloads component in the Google Chrome browser is related to information representation errors in the user interface. Exploiting this vulnerability can allow a remote attacker to perform spear-phishing attacks...

Google Chrome Codecs Code Execution

The vulnerability of Google Chrome’s Codecs component is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

vllm-metal inference backend Component Code Execution

The vulnerability of the vllm-metal inference backend component of the Docker Desktop Docker Model Runner plugin is related to the inclusion of functions from an unverified controlled area. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

ADFS DoS

The vulnerability of the Active Directory Federation Services AD FS for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Markdown preview extensions Code Execution

The vulnerability of Markdown extension Preview Enhanced code editors like Visual Studio Code, Pulsar, and Atom is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

shell-quote npm Code Execution

The vulnerability of the quote function in the shell-quote npm package is related to the lack of data cleansing measures at the control level. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Google Chrome Use-After-Free

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome Media DoS

The vulnerability of the Google Chrome browser’s Media component is related to reading beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

Google Chrome ViewTransitions Unauthorized Access

The vulnerability of the ViewTransitions component in Google Chrome browser is related to the use of an unauthorized intermediate policy file. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...

Google Chrome Compositing Unauthorized Access

The vulnerability of the Compositing component in the Google Chrome browser is related to the execution of operations beyond the buffer boundaries in memory. Exploitation of this vulnerability may allow a malicious actor to gain unauthorized access to protected information...

Google Chrome Navigation Unauthorized Access

The vulnerability of the Google Chrome browser’s Navigation function is related to improper protection of physical external channels. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

Google Chrome Code Execution

The vulnerability of Google Chrome’s user interface relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

axios Uncontrolled Resource Consumption

The vulnerability of the axios library is related to an uncontrolled resource consumption when processing the maxBodyLength parameter. Exploiting this vulnerability could allow a remote attacker to compromise the accessibility of the protected information...

fetch library axios Data Compromise

The vulnerability of the axios library’s fetch adapter is related to the unlimited distribution of resources. Exploiting this vulnerability allows a remote attacker to compromise the accessibility of protected information...

axios Prototype Modification

The vulnerability of the axios library is related to uncontrolled changes in the attributes of the object’s prototype. Exploiting this vulnerability can allow a malicious actor to compromise the integrity of the protected information...

.NET DoS

The vulnerabilities of .NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

Azure Active Directory Deserialization DoS

The vulnerability of the Azure Active Directory identity management and protection platform is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

Azure Active Directory Loop DoS

The vulnerability of the Azure Active Directory identity management and protection platform is related to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause a service failure...

Microsoft Word Code Execution

The vulnerability of Microsoft Word and the Microsoft Office 365 suite is related to a memory reclamation error. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Office Memory Use After Free Code Execution

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to...

Microsoft Office Memory Use After Free Code Execution

The vulnerability of Microsoft Word, the Microsoft Office suite, and Microsoft 365 Apps for Enterprise, Microsoft SharePoint Server, and Microsoft SharePoint Enterprise Server is related to the ability to exploit memory after it is freed. Exploiting this vulnerability could allow an attacker to...

.NET DoS

The vulnerabilities of .NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to the unlimited distribution of resources. Exploiting these vulnerabilities can allow a malicious actor to cause service failures remotely...

Windows Runtime Privilege Escalation

The vulnerability of the Windows Runtime component in Windows operating systems is related to competitive access to resources a state of competition. Exploiting this vulnerability can allow an attacker to enhance their privileges...

Windows kernel Privilege Escalation

The vulnerability of the Windows operating system’s kernel is related to data type mixing errors. Exploiting this vulnerability can allow an attacker to increase their privileges...

GDI Privilege Escalation

The vulnerability of the GDI component in Windows operating systems is related to buffer overflow in the stack. Exploiting this vulnerability can allow an attacker to increase their privileges...

DbGate JSON Script Runner Code Execution

The vulnerability of the JSON Script Runner component in a cross-platform application for browsing and modifying database data in the DbGate browser is related to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

.NET Privilege Escalation

The vulnerabilities of .NET software platforms, the Microsoft .NET Framework, and Microsoft Visual Studio are related to improper code generation management. Exploiting these vulnerabilities can allow attackers to enhance their privileges...

Google Chrome Use-After-Free

The vulnerability of Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Google Chrome SwiftShader Code Execution

The vulnerability of Google Chrome’s SwiftShader library is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Microsoft Word Numerical Truncation Disclosure

The vulnerability of Microsoft Word and the Microsoft Office 365 suite is related to numerical truncation errors. Exploiting this vulnerability can allow an attacker to disclose protected information...

Google Chrome Downloads Code Execution

The vulnerability of the Downloads component in the Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

Unbound DNS Server Code Execution

The vulnerability of the Unbound DNS server is related to numerical truncation errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Unbound DNS DoS

The vulnerability of the Unbound DNS server is related to insufficient validation of input data and improper implementation of functions. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Gitea XSS

The vulnerability of the Gitea repository management system is related to the lack of measures taken to protect the website structure when processing the extensionsRequired parameter. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks through specially...

ImageMagick ConnectedComponentsImage Buffer Overflow DoS

The vulnerability of the ConnectedComponentsImage function in the console-based image editing tool ImageMagick is related to reading data beyond the permitted range of memory. Exploiting this vulnerability could allow an attacker to cause a service failure or execute arbitrary code...