145300 matches found
firefox: Use-after-free in the Crash Reporting component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the Crash Reporting component...
firefox: Use-after-free in the JavaScript Engine: JIT component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Use-after-free in the JavaScript Engine: JIT component...
firefox: Information disclosure in the Networking component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Information disclosure in the Networking component...
firefox: Incorrect boundary conditions in the DOM: Editor component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Incorrect boundary conditions in the DOM: Editor component...
firefox: Privilege escalation in the DOM: Navigation component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Privilege escalation in the DOM: Navigation component...
firefox: Spoofing issue in the DOM: Web Serial component
A flaw was found in Firefox. The Mozilla Foundation's Security Advisory describes the following issue: Spoofing issue in the DOM: Web Serial component...
Important: Red Hat Security Advisory: libXi security update
An update for libXi is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow
A flaw was found in libXi. A heap-based buffer overflow vulnerability occurs when the library processes DEVICERESOLUTION data received from an X Window System server. A malicious or compromised X server can send crafted responses to a connecting client application, potentially leading to arbitrar...
libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply
A flaw was found in libXi. A malicious X server can send an oversized DEVICEENABLE response to a connecting client application, triggering a heap-based buffer overflow. This memory corruption can allow arbitrary code execution in the context of the client application or cause it to crash, resulti...
Moderate: Red Hat Security Advisory: libkcapi security update
An update for libkcapi is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring...
libkcapi: Memory corruption via uncanceled AIO requests on error in libkcapi's one-shot AIO path
Memory Corruption via Uncanceled AIO Requests on Error: libkcapi's one-shot AIO path can return an error before all submitted IOCBs are drained, allowing later kernel writes into caller-owned output buffers...
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core:jackson-databind: Jackson-databind: Denial of Service via quadratic forward-reference completion
A flaw was found in FasterXML jackson-databind. This vulnerability allows a remote attacker to cause a Denial of Service DoS by providing specially crafted JSON input to an application that deserializes it into an identity-enabled collection or map. The flaw occurs due to inefficient processing o...
com.fasterxml.jackson.core/jackson-databind: tools.jackson.core/jackson-databind: jackson-databind: CPU Denial of Service via unbounded numeric parsing
A flaw was found in jackson-databind. An unauthenticated attacker can trigger a denial of service DoS by exploiting an unbounded numeric parse vulnerability. This occurs during the deserialization of javax.xml.datatype.Duration or javax.xml.datatype.XMLGregorianCalendar fields from JSON strings,...
Important: Red Hat Security Advisory: jackson-annotations, jackson-core, jackson-databind, jackson-jaxrs-providers, and jackson-modules-base security update
An update for multiple packages is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth
A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow...
Important: Red Hat Security Advisory: libsoup security update
An update for libsoup is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion
A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...
libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth
A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...
libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow...
libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly
A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used th...
libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser
A flaw was found in libXtst. An out-of-bounds read vulnerability in the RECORD extension reply parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. Under certain conditions, this flaw may also result in limited information disclosure...
Important: Red Hat Security Advisory: libXtst security update
An update for libXtst is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
libsoup: libsoup: Heap buffer overflow from WebSocket Pong signal type confusion
A flaw was found in libsoup. When handling an incoming WebSocket Pong frame, SoupWebsocketConnection emitted the ::pong signal with a GByteArray pointer even though the signal is declared to pass a GBytes. Applications connecting a handler that follows the documented GBytes API can trigger heap...
Important: Red Hat Security Advisory: libsoup security update
An update for libsoup is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
libsoup: libsoup: Heap buffer overflow during WebSocket receive-buffer growth
A flaw was found in libsoup. When max-incoming-payload-size is unlimited 0, SoupWebsocketConnection could grow its incoming GByteArray based on an attacker-controlled frame length until the length wrapped, causing a heap buffer overflow while reading frame data...
libsoup: libsoup: Heap buffer overflow during WebSocket message reassembly
A flaw was found in libsoup. When reassembling fragmented WebSocket messages into a GByteArray, libsoup did not adequately cap total message size against the limits of the underlying buffer type. A remote peer could send fragments that caused size truncation while the implementation still used th...
libsoup: libsoup: Heap buffer overflow during WebSocket client-frame masking
A flaw was found in libsoup. When constructing a masked WebSocket client frame for a very large outgoing payload, size values passed to GByteArray allocation APIs could be truncated while the masking routine still used the full length, causing a heap buffer overflow...
libsoup: libsoup: Heap buffer overflow during outgoing permessage-deflate buffer growth
A flaw was found in libsoup. When the permessage-deflate WebSocket extension compresses a very large outgoing message, truncated size calculations used for GByteArray growth could wrap, causing zlib to write past the allocated buffer and resulting in a heap buffer overflow...
Important: Red Hat Security Advisory: libXtst security update
An update for libXtst is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...
libXtst: libXtst: Denial of Service via out-of-bounds read in RECORD reply parser
A flaw was found in libXtst. An out-of-bounds read vulnerability in the RECORD extension reply parser allows a malicious X server to cause a Denial of Service DoS by crashing connected client applications. Under certain conditions, this flaw may also result in limited information disclosure...
Important: Red Hat Security Advisory: libXi security update
An update for libXi is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow
A flaw was found in libXi. A heap-based buffer overflow vulnerability occurs when the library processes DEVICERESOLUTION data received from an X Window System server. A malicious or compromised X server can send crafted responses to a connecting client application, potentially leading to arbitrar...
libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply
A flaw was found in libXi. A malicious X server can send an oversized DEVICEENABLE response to a connecting client application, triggering a heap-based buffer overflow. This memory corruption can allow arbitrary code execution in the context of the client application or cause it to crash, resulti...
libXi: libXi: Arbitrary code execution via oversized DEVICE_ENABLE reply
A flaw was found in libXi. A malicious X server can send an oversized DEVICEENABLE response to a connecting client application, triggering a heap-based buffer overflow. This memory corruption can allow arbitrary code execution in the context of the client application or cause it to crash, resulti...
Important: Red Hat Security Advisory: libXi security update
An update for libXi is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
libXi: libXi: Arbitrary code execution via DEVICE_RESOLUTION heap-based buffer overflow
A flaw was found in libXi. A heap-based buffer overflow vulnerability occurs when the library processes DEVICERESOLUTION data received from an X Window System server. A malicious or compromised X server can send crafted responses to a connecting client application, potentially leading to arbitrar...
pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation)
A missing verification step has been discovered in PyJWT. PyJWT does not validate the crit Critical Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing extensions that PyJWT does not understand, the library accepts the token instead of rejecting it. This...
Important: Red Hat Security Advisory: python-jwt security update
An update for python-jwt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fro...
chromium: skia: chromium: skia: Heap buffer overflow in Skia
Heap buffer overflow in Skia in Google Chrome prior to 128.0.6613.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...
chromium-browser: skia: chromium-browser: skia: Use after free in Skia
An use after free flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=500393328...
chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE
An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513048822...
chromium-browser: angle: chromium-browser: Insufficient validation of untrusted input in ANGLE
An insufficient validation of untrusted input flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513920834...
chromium-browser: angle: chromium-browser: Use after free in ANGLE
An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=503054174...
chromium-browser: angle: chromium-browser: Use after free in ANGLE
An use after free flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=512995785...
chromium-browser: angle: Out of bounds write in ANGLE
An out of bounds write flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=511772608...
chromium-browser: angle: chromium-browser: Out of bounds write in ANGLE
An out of bounds write flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=513010645...
chromium-browser: angle: chromium-browser: Uninitialized Use in ANGLE
An uninitialized use flaw was found in the ANGLE component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516865345...
chromium-browser: skia: chromium-browser: skia: Use after free in Skia
An use after free flaw was found in the Skia component of the Chromium browser. Upstream bugs: https://code.google.com/p/chromium/issues/detail?id=516981393...
webkitgtk: Visiting a website that frames malicious content may lead to UI spoofing
A flaw was found in WebKitGTK. Visiting a website that frames malicious content can cause UI spoofing due to UI issues...
webkitgtk: Processing maliciously crafted web content may lead to an unexpected Safari crash
A flaw was found in WebKitGTK. Processing malicious web content can cause an unexpected process crash due to improper locking...