98239 matches found
ANGLE Component Confidential Data Access
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Skia Graphic Library Confidential Data Access
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ANGLE Component Confidential Data Access
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Skia Graphic Library DoS
The vulnerability of the Skia graphic library used by Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Codecs Component Confidential Data Access
The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their permitted limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to buffer overflow attacks. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
Skia Graphic Library Data Compromise
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user interface. Exploiting this vulnerability allows a malicious actor to manipulate data integrity through a specially created HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
ANGLE Component Confidential Data Access
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
ANGLE Component Confidential Data Access
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to reading data beyond the allowed buffer size. Exploiting this vulnerability can allow an attacker to access confidential data through a specially created HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to data type conversion errors. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Google Chrome Skia DoS
The vulnerability of Google Chrome’s Skia graphics library is related to errors in HTTP requests. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
ANGLE Component Confidential Data Access
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
Skia Graphic Library Confidential Data Access
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge is related to errors during variable initialization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
ANGLE Component Confidential Data Access
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially crafted HTML page...
ANGLE DoS
The vulnerability of the ANGLE component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...
Skia Graphic Library Information Disclosure
The vulnerability of the Skia graphic library in Google Chrome and Microsoft Edge relates to errors during variable initialization. Exploiting this vulnerability can allow an attacker to disclose protected information through a specially created HTML page...
Linux kernel trace ring buffer Heap Buffer Overflow DoS
The vulnerability of the rbmetavalidateevents function in the kernel/trace/ringbuffer.c module, which supports kernel tracing in Linux operating systems, is related to the pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
Views Component Code Execution
The vulnerability of the Views component in Google Chrome and Microsoft Edge relates to the ability to utilize memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code through a specially created HTML page...
Actor Component DoS
The vulnerability of the Actor component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service interruptions through a specially created HTML page...
Storage Component Confidential Data Access
The vulnerability of the Storage component in Google Chrome and Microsoft Edge relates to the simultaneous execution using a shared resource with incorrect synchronization. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML pag...
Forms Component Google Chrome Microsoft Edge Sensitive Data Compromise
The vulnerability of the Forms component in Google Chrome and Microsoft Edge relates to the lack of protective measures for the web page structure. Exploiting this vulnerability can allow an attacker to gain access to confidential data and compromise its integrity through a specially created HTML...
Apache Log4j2 FilteredObjectInputStream Code Execution
The vulnerability of the FilteredObjectInputStream component in the Apache Log4j2 logging library is related to deserialization mechanism flaws. Exploiting this vulnerability allows an attacker to execute arbitrary code...
Kaspersky Endpoint Security GUI Bypass DoS
The vulnerability of the graphical user interface of Kaspersky Endpoint Security’s antivirus protection for Windows relates to insecure temporary files. Exploiting this vulnerability can allow a malicious actor to bypass existing security mechanisms and cause partial service interruption...
NLTK Bypass Arbitrary File Read Write
The vulnerability of the application programming interface of the Natural Language Processing library NLTK is related to improper external management of file names or file paths. Exploiting this vulnerability can allow an attacker to bypass existing security mechanisms and gain read-write access ...
NLTK Downloader Bypass Write Delete
The vulnerability of the nltk.downloader.Downloader.download and nltk.downloader.Downloader.incrdownload components of the NLTK library, which are used for symbolic and statistical processing of natural language, is related to an incorrect definition of symbolic references before accessing files...
Wazuh update_master_files_in_worker RCE
The vulnerability of the updatemasterfilesinworker function on the platform for security monitoring and threat detection by Wazuh is related to an incorrect restriction on the path to the directory. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to root an...
su-exec Heap Buffer Overflow Privilege Escalation
The vulnerability of the strtol function in the su-exec utility is related to incorrect conversion of numerical types. Exploiting this vulnerability can allow an attacker to elevate their privileges to root and execute arbitrary code...
gix-pack apply Heap Overflow DoS
The vulnerability of the apply function in the gix-pack library is related to an error in handling exceptional states. Exploiting this vulnerability could allow a remote attacker to cause service failures...
NVIDIA nvoglv64.dll Driver DoS
The vulnerability of the nvoglv64.dll graphics driver from NVIDIA is related to the improper assignment of permissions for a critical resource. Exploiting this vulnerability can allow an attacker to cause a service failure...
Cross Device Service Privilege Escalation
The vulnerability of the Cross Device Service for Windows operating systems is related to deficiencies in access control when processing the enabled parameter of the SeImpersonatePrivilege service token, as a result of loading the malicious CrossDeviceStreaming.Source.dll library. Exploiting this...
Windows Installer Privilege Escalation
The vulnerability of Windows operating system installers is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows Telephony Service Privilege Escalation
The vulnerability of the Windows operating system’s Telephony Service is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
iSCSI Target Service Code Execution
The vulnerability of the iSCSI Target Service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Windows Message Queue Privilege Escalation
The vulnerability of Windows operating systems’ message queues is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
Windows DNS Code Execution
The vulnerability of DNS servers on Windows operating systems is related to the use of memory after it has been freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Desktop Window Managers Privilege Escalation
The vulnerability of desktop window managers in Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
iSCSI Target Service DoS
The vulnerability of the iSCSI Target Service for Windows operating systems is related to pointer aliasing. Exploiting this vulnerability could allow a malicious actor to trigger a service failure remotely...
iSCSI Target Service Code Execution
The vulnerability of the iSCSI Target Service for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
Remote Access API Privilege Escalation
The vulnerability of the Remote Access API interface for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to increase their privileges...
SSTP Code Execution
The vulnerability of the Secure Socket Tunneling Protocol SSTP implementation in Windows operating systems is related to the reclamation of memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
GDI+ Privilege Escalation
The vulnerability of the Windows Graphics Device Interface Plus GDI+ component in operating systems involves the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to increase their privileges...
PHP mb_* Functions
The vulnerability of the functions mbconvertencoding, mbdetectencoding, mbconvertvariables, and mbdetectorder in the PHP interpreter is related to reading beyond the buffer boundaries. Exploiting this vulnerability can allow a malicious actor to cause an unexpected termination of the application...
Active Directory Certificate Services Code Execution
The vulnerability of the Active Directory Certificate Services AD CS service, which manages distribution and usage of certificates on Windows operating systems, is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
Reliable Multicast Transport Driver Code Execution
The vulnerability of the Reliable Multicast Transport Driver RMCAST for Windows operating systems is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...