Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-5472 State: PUBLISHED Published: 2024-07-13T06:00:11.980Z Last Updated: 2024-08-01T21:11:12.763Z Vendors: Unknown Products: WP QuickLaTeX Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The WP QuickLaTeX WordPress plugin before 3.8.7 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/dcddc2de-c32c-4f8c-8490-f3d980b05822/
CVE ID: CVE-2024-5473 State: PUBLISHED Published: 2024-06-26T06:00:05.192Z Last Updated: 2024-08-01T21:11:12.795Z Vendors: Unknown Products: Simple Photoswipe Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Simple Photoswipe WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/9c70cfc4-5759-469a-a6a3-510c405bd28a/
CVE ID: CVE-2024-5474 State: PUBLISHED Published: 2024-10-11T15:15:12.643Z Last Updated: 2024-10-11T19:07:47.060Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Lenovo Products: Dolby Vision Provisioning software Problem Types: CWE-276 Description: A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on the system with elevated privileges during installation of the package. Previously installed versions are not affected by this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.len
ons are not affected by this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.lenovo.com/us/en/product_security/LEN-158394
CVE ID: CVE-2024-5475 State: PUBLISHED Published: 2024-06-20T06:00:03.582Z Last Updated: 2024-08-01T21:11:12.785Z Vendors: Unknown Products: Responsive video embed Problem Types: CWE-79 Cross-Site Scripting (XSS) Description: The Responsive video embed WordPress plugin before 0.5.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/cee66543-b5d6-4205-8f9b-0febd7fee445/
CVE ID: CVE-2024-5477 State: PUBLISHED Published: 2025-08-13T17:47:09.166Z Last Updated: 2025-08-13T19:41:17.129Z Vendors: HP Inc. Products: Certain HP PC Products Problem Types: CWE-1256 Description: A potential security vulnerability has been identified in the System BIOS for some HP PC products which may allow escalation of privilege, arbitrary code execution, denial of service, or information disclosure via a physical attack that requires specialized equipment and knowledge. HP is releasing firmware mitigation for the potential vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.hp.com/us-en/document/ish_12878449-12878471-16/hpsbhf04043
CVE ID: CVE-2024-5478 State: PUBLISHED Published: 2024-06-06T18:20:05.917Z Last Updated: 2024-08-01T21:11:12.802Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: lunary-ai Products: lunary-ai/lunary Problem Types: CWE-79 Description: A Cross-site Scripting (XSS) vulnerability exists in the SAML metadata endpoint `/auth/saml/${org?.id}/metadata` of lunary-ai/lunary version 1.2.7. The vulnerability arises due to the application's failure to escape or validate the `orgId` parameter supplied by the user before incorporating it into the generated response. Specifically, the endpoint generates XML responses for SAML metadata, where the `orgId` parameter is directly
response. Specifically, the endpoint generates XML responses for SAML metadata, where the `orgId` parameter is directly embedded into the XML structure without proper sanitization or validation. This flaw allows an attacker to inject arbitrary JavaScript code into the generated SAML metadata page, leading to potential theft of user cookies or authentication tokens. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/e899f496-d493-4c06-b596-cb0a88ad451b
CVE ID: CVE-2024-5479 State: PUBLISHED Published: 2024-07-09T08:33:01.822Z Last Updated: 2024-08-01T21:11:12.797Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: jevnet Products: Easy Pixels Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Easy Pixels plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin settings in all versions up to, and including, 2.13 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected pag
henticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0a397025-ada7-4a59-80b9-5a778ea27776?source=cve - https://plugins.trac.wordpress.org/browser/easy-pixels-by-jevnet/trunk/admin/easyPixelsAdmin.php#L48 - https://plugins.trac.wordpress.org/browser/easy-pixels-by-jevnet/trunk/easyPixels.php#L66 - https://plugins.trac.wordpress.org/browser/easy-pixels-by-jevnet/trunk/classes/easy-pixels.php#L87
CVE ID: CVE-2024-5480 State: REJECTED Published: 2024-06-06T18:17:40.825Z Last Updated: 2024-10-02T15:34:29.781Z Description: No description available.
CVE ID: CVE-2024-5481 State: PUBLISHED Published: 2024-06-07T09:33:36.357Z Last Updated: 2024-08-01T21:11:12.793Z Severity: MEDIUM (CVSS 6.8 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: 10web Products: Photo Gallery by 10Web – Mobile-Friendly Image Gallery Problem Types: CWE-35 Path Traversal: '.../...//' Description: The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.8.23 via the esc_dir function. This makes it possible for authenticated attackers to cut and paste (copy) the contents of arbitrary files on the server, which can contain sensitive information, and to cut (delete) arbi
(copy) the contents of arbitrary files on the server, which can contain sensitive information, and to cut (delete) arbitrary directories, including the root WordPress directory. By default this can be exploited by administrators only. In the premium version of the plugin, administrators can give gallery edit permissions to lower level users, which might make this exploitable by users as low as contributors. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/76c38826-4d49-4204-b6b6-b01d01373fa9?source=cve - https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#
6b6-b01d01373fa9?source=cve - https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L178 - https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L512 - https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L436 - https://plugins.trac.wordpress.org/changeset/3098798/ - https://wordpress.org/plugins/photo-gallery/#developers
CVE ID: CVE-2024-5482 State: PUBLISHED Published: 2024-06-06T17:56:52.609Z Last Updated: 2024-08-01T21:11:12.786Z Severity: HIGH (CVSS 7.4 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N) Vendors: parisneo Products: parisneo/lollms-webui Problem Types: CWE-918 Description: A Server-Side Request Forgery (SSRF) vulnerability exists in the 'add_webpage' endpoint of the parisneo/lollms-webui application, affecting the latest version. The vulnerability arises because the application does not adequately validate URLs entered by users, allowing them to input arbitrary URLs, including those that target internal resources such as 'localhost' or '127.0.0.1'. This flaw enables attackers to make unauthoriz
those that target internal resources such as 'localhost' or '127.0.0.1'. This flaw enables attackers to make unauthorized requests to internal or external systems, potentially leading to access to sensitive data, service disruption, network integrity compromise, business logic manipulation, and abuse of third-party resources. The issue is critical and requires immediate attention to maintain the application's security and integrity. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/d97e23e7-172f-4862-a732-86bfc0b7860e
CVE ID: CVE-2024-5483 State: PUBLISHED Published: 2024-06-05T02:34:31.183Z Last Updated: 2024-08-01T21:11:12.789Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: thimpress Products: LearnPress – WordPress LMS Plugin Problem Types: CWE-200 Information Exposure Description: The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 4.2.6.8 due to incorrect implementation of get_items_permissions_check function. This makes it possible for unauthenticated attackers to extract basic information about website users, including their emails Additional Analyst Notes: - CISA ADP Vuln
ckers to extract basic information about website users, including their emails Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/122b75d2-e882-45b9-baf1-acf847f8d60a?source=cve - https://plugins.trac.wordpress.org/browser/learnpress/tags/4.2.6.8/inc/jwt/rest-api/version1/class-lp-rest-users-v1-controller.php#L130
CVE ID: CVE-2024-5484 State: REJECTED Published: N/A Last Updated: 2024-05-31T10:21:49.797Z Description: No description available.
CVE ID: CVE-2024-5485 State: PUBLISHED Published: 2024-06-04T06:41:46.423Z Last Updated: 2024-08-01T21:11:12.767Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: brainstormforce Products: SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The SureTriggers – Connect All Your Plugins, Apps, Tools & Automate Everything! plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Trigger Link shortcode in all versions up to, and including, 1.0.47 due to insufficient input sanitization and output e
Trigger Link shortcode in all versions up to, and including, 1.0.47 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ab19f7b1-2b1e-43bc-9843-ddee0fc74f50?source=cve - https://wordpress.org/plugins/suretriggers/#developers - https://plugins.trac.wordpress.org/changeset/3096816/
CVE ID: CVE-2024-5486 State: PUBLISHED Published: 2024-07-30T17:04:24.617Z Last Updated: 2024-10-28T19:55:49.104Z Severity: MEDIUM (CVSS 5.8 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N) Vendors: Hewlett Packard Enterprise (HPE) Products: ClearPass Policy Manager (CPPM) Description: A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container
ervices supported by ClearPass Policy Manager Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04675en_us&docLocale=en_US
CVE ID: CVE-2024-5487 State: PUBLISHED Published: 2024-08-12T07:04:12.610Z Last Updated: 2024-08-16T14:02:11.147Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADAudit Plus versions below 8110 are vulnerable to authenticated SQL Injection in attack surface analyzer's export option. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2024-5487.html
CVE ID: CVE-2024-5488 State: PUBLISHED Published: 2024-07-09T06:00:04.275Z Last Updated: 2024-08-01T21:11:12.790Z Vendors: Unknown Products: SEOPress Problem Types: CWE-502 Deserialization of Untrusted Data Description: The SEOPress WordPress plugin before 7.9 does not properly protect some of its REST API routes, which combined with another Object Injection vulnerability can allow unauthenticated attackers to unserialize malicious gadget chains, compromising the site if a suitable chain is present. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://wpscan.com/vulnerability/28507376-ded0-4e1a-b2fc-2182895aa14c/
CVE ID: CVE-2024-5489 State: PUBLISHED Published: 2024-06-06T11:33:43.151Z Last Updated: 2024-08-01T21:11:12.790Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: wbcomdesigns Products: Wbcom Designs – Custom Font Uploader Problem Types: CWE-862 Missing Authorization Description: The Wbcom Designs – Custom Font Uploader plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'cfu_delete_customfont' function in all versions up to, and including, 2.3.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete any custom font. Additional Analyst Notes: - CISA ADP Vulnri
ttackers, with Subscriber-level access and above, to delete any custom font. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/2339ebbf-2302-4e83-9743-ca79fda20f05?source=cve - https://plugins.trac.wordpress.org/browser/custom-font-uploader/trunk/inc/cfup-functions.php#L20 - https://plugins.trac.wordpress.org/changeset/3097373/
CVE ID: CVE-2024-5490 State: PUBLISHED Published: 2024-08-23T13:44:08.468Z Last Updated: 2024-08-23T14:43:05.433Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: ManageEngine Products: ADAudit Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine ADAudit Plus versions below 8000 are vulnerable to the authenticated SQL injection in aggregate reports option. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/products/active-directory-audit/cve-2024-5490.html
CVE ID: CVE-2024-5491 State: PUBLISHED Published: 2024-07-10T18:56:08.095Z Last Updated: 2024-11-01T15:22:05.242Z Vendors: NetScaler Products: NetScaler ADC, NetScaler Gateway Description: Denial of Service in NetScaler ADC and NetScaler Gateway in NetScaler Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492
CVE ID: CVE-2024-5492 State: PUBLISHED Published: 2024-07-10T19:04:40.775Z Last Updated: 2024-08-01T21:11:12.831Z Vendors: NetSclaer Products: NetScaler ADC Description: Open redirect vulnerability allows a remote unauthenticated attacker to redirect users to arbitrary websites in NetScaler ADC and NetScaler Gateway Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://support.citrix.com/article/CTX677944/netscaler-adc-and-netscaler-gateway-security-bulletin-for-cve20245491-and-cve20245492
CVE ID: CVE-2024-5493 State: PUBLISHED Published: 2024-05-30T23:02:39.646Z Last Updated: 2025-02-13T17:54:16.108Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in WebRTC in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/339877165 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproje
/issues.chromium.org/issues/339877165 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5SQOWDIVBXQYQPPBSCH7EFISYAOCTHD/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZW4TZXVPN3NLZ4UDGZP6OASUM4OVLXX2/
CVE ID: CVE-2024-5494 State: PUBLISHED Published: 2024-05-30T23:02:40.024Z Last Updated: 2025-02-13T17:54:16.726Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/338071106 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message
um.org/issues/338071106 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5SQOWDIVBXQYQPPBSCH7EFISYAOCTHD/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZW4TZXVPN3NLZ4UDGZP6OASUM4OVLXX2/
CVE ID: CVE-2024-5495 State: PUBLISHED Published: 2024-05-30T23:02:40.288Z Last Updated: 2025-02-13T17:54:17.408Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Dawn in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/338103465 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message
um.org/issues/338103465 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5SQOWDIVBXQYQPPBSCH7EFISYAOCTHD/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZW4TZXVPN3NLZ4UDGZP6OASUM4OVLXX2/
CVE ID: CVE-2024-5496 State: PUBLISHED Published: 2024-05-30T23:02:40.530Z Last Updated: 2025-02-13T17:54:18.291Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/338929744 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraprojec
issues.chromium.org/issues/338929744 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5SQOWDIVBXQYQPPBSCH7EFISYAOCTHD/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZW4TZXVPN3NLZ4UDGZP6OASUM4OVLXX2/
CVE ID: CVE-2024-5497 State: PUBLISHED Published: 2024-05-30T23:02:40.767Z Last Updated: 2025-02-13T17:54:19.002Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/339061099 - https:/
oogleblog.com/2024/05/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/339061099 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5SQOWDIVBXQYQPPBSCH7EFISYAOCTHD/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZW4TZXVPN3NLZ4UDGZP6OASUM4OVLXX2/
CVE ID: CVE-2024-5498 State: PUBLISHED Published: 2024-05-30T23:02:41.017Z Last Updated: 2025-02-13T17:54:19.622Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Presentation API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/339588211 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject
ssues.chromium.org/issues/339588211 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5SQOWDIVBXQYQPPBSCH7EFISYAOCTHD/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZW4TZXVPN3NLZ4UDGZP6OASUM4OVLXX2/
CVE ID: CVE-2024-5499 State: PUBLISHED Published: 2024-05-30T23:02:41.258Z Last Updated: 2025-02-13T17:54:20.224Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Out of bounds write in Streams API in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/339877167 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedo
https://issues.chromium.org/issues/339877167 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5SQOWDIVBXQYQPPBSCH7EFISYAOCTHD/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZW4TZXVPN3NLZ4UDGZP6OASUM4OVLXX2/