KATALOG INFORMACJI
Znajdź podatności, zrozum powód priorytetu i sprawdź informacje u źródła.
Pełny dostępny katalog: publikacje z ostatnich 365 dni oraz całe dostępne KEV. Dopasowanie kategorii lub producenta nie potwierdza podatności konkretnej wersji produktu.
Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Wykorzystanie po zwolnieniu pamięci w ANGLE w Google Chrome umożliwia zdalne wykonanie ataku.
GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to an…
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user…
ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by…
Ucieczka z piaskownicy w komponencie graficznym umożliwia zdalne wykonanie kodu.
Błąd zapisu poza granicami w GPU w Google Chrome na Androidzie umożliwia zdalne wykonanie ucieczki z piaskownicy.
WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection). The weakness arises due to insufficient validation of user input in plugin endpoints, allowing…
Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS authentication is not enabled (i.e. in the default configuration). NOTE: * The vendor believes that this vulnerability only occurs…
Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17.
Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5.
Ucieczka z piaskownicy w komponencie XUL umożliwia zdalne wykonanie kodu.
Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157.
Ucieczka z piaskownicy w komponencie graficznym umożliwia zdalne wykonanie kodu.
Niewystarczająca walidacja danych w Google Chrome na Androidzie umożliwia zdalne obejście piaskownicy.
Niewystarczająca walidacja danych w Google Chrome umożliwia zdalne wydostanie się z piaskownicy.
Niewystarczające egzekwowanie polityki w DevTools Google Chrome umożliwia zdalnemu atakującemu ucieczkę z piaskownicy.
Wykorzystanie po zwolnieniu pamięci w Google Chrome umożliwia zdalnemu atakującemu eskalację uprawnień.
Wykorzystanie po zwolnieniu pamięci w USB w Google Chrome na Mac umożliwia zdalne eskalowanie uprawnień.
Wykorzystanie po zwolnieniu pamięci w GPU w Google Chrome umożliwia zdalne przejęcie kontroli.
| Producent / podatność | Opis | Rekomendacja i powód | CVSS | EPSS | Daty źródłowe | Zapis |
|---|---|---|---|---|---|---|
| Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside… | Use after free in ANGLE in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code… | Out of bounds write in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary… | Use after free in Chrome Tabs in Google Chrome on on Mac prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the… | Use after free in Tint in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
W tym tygodniu | 9,6 | 0,34 % | ||
| Wykorzystanie po zwolnieniu pamięci w ANGLE w Google Chrome umożliwia zdalne wykonanie ataku. | Wykorzystanie po zwolnieniu pamięci w ANGLE w Google Chrome umożliwia zdalne wykonanie ataku. |
W tym tygodniu | 9,6 | 0,34 % | ||
| GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12,… | GitLab has remediated a vulnerability in the GitLab AI Gateway component affecting all versions of the AI Gateway from 18.10 to 19.0.12, 19.1 to 19.1.7, and 19.2 to 19.2.2 that could have allowed an authenticated user with Duo Agent Platform access to redirect outbound model requests to an… |
W tym tygodniu | 9,6 | 0,34 % | ||
| ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized write access. Exploitation of this issue does not require user… |
W tym tygodniu | 9,6 | 0,33 % | ||
| ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the… | ColdFusion is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary code. The vulnerable component is restricted to an administrative network zone by… |
W tym tygodniu | 9,6 | 0,33 % | ||
| Ucieczka z piaskownicy w komponencie graficznym umożliwia zdalne wykonanie kodu. | Ucieczka z piaskownicy w komponencie graficznym umożliwia zdalne wykonanie kodu. |
W tym tygodniu | 9,6 | 0,33 % | ||
| Błąd zapisu poza granicami w GPU w Google Chrome na Androidzie umożliwia zdalne wykonanie ucieczki z piaskownicy. | Błąd zapisu poza granicami w GPU w Google Chrome na Androidzie umożliwia zdalne wykonanie ucieczki z piaskownicy. |
W tym tygodniu | 9,6 | 0,33 % | ||
| WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability… | WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection). The weakness arises due to insufficient validation of user input in plugin endpoints, allowing… |
W tym tygodniu | 9,6 | 0,33 % | ||
| Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social… | Missing authorization in Chrome for iOS in Google Chrome on on iOS prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High) |
W tym tygodniu | 9,6 | 0,33 % | ||
| Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social… | Incorrect authorization in Search in Google Chrome on on Android prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium) |
W tym tygodniu | 9,6 | 0,33 % | ||
| The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions… | The Control-M/Agent is vulnerable to unauthenticated remote code execution, arbitrary file read and write and similar unauthorized actions when mutual SSL/TLS authentication is not enabled (i.e. in the default configuration). NOTE: * The vendor believes that this vulnerability only occurs… |
W tym tygodniu | 9,5 | 0,83 % | ||
| Sandbox escape in the DOM: Navigation component. | Sandbox escape in the DOM: Navigation component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 140.17, Thunderbird 153.4, Firefox 157, Firefox ESR 115.42, and Firefox ESR 140.17. |
W tym tygodniu | 9,6 | 0,32 % | ||
| Sandbox escape due to incorrect boundary conditions in the Networking component. | Sandbox escape due to incorrect boundary conditions in the Networking component. This vulnerability was fixed in Firefox 158, Firefox ESR 153.5, Thunderbird 158, and Thunderbird 153.5. |
W tym tygodniu | 9,6 | 0,32 % | ||
| Ucieczka z piaskownicy w komponencie XUL umożliwia zdalne wykonanie kodu. | Ucieczka z piaskownicy w komponencie XUL umożliwia zdalne wykonanie kodu. |
W tym tygodniu | 9,6 | 0,32 % | ||
| Sandbox escape in the Security: Process Sandboxing component. | Sandbox escape in the Security: Process Sandboxing component. This vulnerability was fixed in Firefox ESR 153.4, Thunderbird 157, Thunderbird 153.4, and Firefox 157. |
W tym tygodniu | 9,6 | 0,32 % | ||
| Ucieczka z piaskownicy w komponencie graficznym umożliwia zdalne wykonanie kodu. | Ucieczka z piaskownicy w komponencie graficznym umożliwia zdalne wykonanie kodu. |
W tym tygodniu | 9,6 | 0,32 % | ||
| Niewystarczająca walidacja danych w Google Chrome na Androidzie umożliwia zdalne obejście piaskownicy. | Niewystarczająca walidacja danych w Google Chrome na Androidzie umożliwia zdalne obejście piaskownicy. |
W tym tygodniu | 9,6 | 0,32 % | ||
| Niewystarczająca walidacja danych w Google Chrome umożliwia zdalne wydostanie się z piaskownicy. | Niewystarczająca walidacja danych w Google Chrome umożliwia zdalne wydostanie się z piaskownicy. |
W tym tygodniu | 9,6 | 0,32 % | ||
| Niewystarczające egzekwowanie polityki w DevTools Google Chrome umożliwia zdalnemu atakującemu ucieczkę z piaskownicy. | Niewystarczające egzekwowanie polityki w DevTools Google Chrome umożliwia zdalnemu atakującemu ucieczkę z piaskownicy. |
W tym tygodniu | 9,6 | 0,32 % | ||
| Wykorzystanie po zwolnieniu pamięci w Google Chrome umożliwia zdalnemu atakującemu eskalację uprawnień. | Wykorzystanie po zwolnieniu pamięci w Google Chrome umożliwia zdalnemu atakującemu eskalację uprawnień. |
W tym tygodniu | 9,6 | 0,32 % | ||
| Wykorzystanie po zwolnieniu pamięci w USB w Google Chrome na Mac umożliwia zdalne eskalowanie uprawnień. | Wykorzystanie po zwolnieniu pamięci w USB w Google Chrome na Mac umożliwia zdalne eskalowanie uprawnień. |
W tym tygodniu | 9,6 | 0,32 % | ||
| Wykorzystanie po zwolnieniu pamięci w GPU w Google Chrome umożliwia zdalne przejęcie kontroli. | Wykorzystanie po zwolnieniu pamięci w GPU w Google Chrome umożliwia zdalne przejęcie kontroli. |
W tym tygodniu | 9,6 | 0,32 % |
Zakres katalogu: ostatnie 365 dni oraz wszystkie zachowane KEV.