Most recent entries from all

bdu:2022-00743

certfr-2022-avi-147 — De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un pro…

certfr-2022-avi-147

CLEANSTART-2024-IP77496 — Use after free in Animation in Google Chrome prior to 98

Affected: CleanStart: chromium

Security vulnerability affects the chromium package. Use after free in Animation in Google Chrome prior to 98.

cnvd-2022-20552

EUVD-2026-255852

fkie_cve-2022-0609

Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

GHSA-vv6j-ww6x-54gx — Use after free in Animation

Affected: NuGet: CefSharp.Common, NuGet: CefSharp.OffScreen, NuGet: CefSharp.WinForms, NuGet: CefSharp.Wpf, NuGet: CefSharp.Wpf.HwndHost, NuGet: CefSharp.Common.NETCore, NuGet: CefSharp.OffScreen.NETCore, NuGet: CefSharp.WinForms.NETCore, NuGet: CefSharp.Wpf.NETCore

CVE-2022-0609: Use after free in Animation

- https://chromereleases.googleblog.com/2022/02/stable-channel-update-for-desktop_14.html - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-0609

Google is aware of reports that exploits for CVE-2022-0609 exist in the wild.

The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. It demands that the victim is doing some kind of user interaction. Technical details are unknown but an exploit is available.

There is currently little other public information on the issue other than it has been flagged as `High` severity.

gsd-2022-0609

ICSA-23-264-05 — Rockwell Automation Connected Components Workbench

Connected Components Workbench utilizes CefSharp version 81.3.100 that contains a use after free vulnerability in Google Chrome versions before 86.0.4240.198. If exploited, a remote threat actor could potentially perform a sandbox escape via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains a use after free vulnerability in Animation within Google Chrome before 98.0.4758.102. This vulnerability could potentially allow a remote threat actor to exploit heap corruption via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains an inappropriate implementation in V8 of Google Chrome before 86.0.4240.18. This vulnerability allows a remote threat actor to potentially exploit heap corruption via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains an inappropriate implementation in V8 of Google Chrome before 86.0.4240.198. This vulnerability allows a remote threat actor to potentially exploit heap corruption via a crafted HTML page. Connected Components Workbench utilizes CefSharp version 81.3.100 that contains a heap buffer overflow vulnerability in Freetype within Google Chrome before 86.0.4240.111. This vulnerability could allow a remote threat actor to potentially exploit heap corruption via a crafted HTML page.

openSUSE-SU-2022:0042-1 — Security update for chromium

Security update for chromium

UBUNTU-CVE-2022-0609

Affected: Ubuntu:18.04:LTS: chromium-browser

Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.