Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-3150 State: PUBLISHED Published: 2024-06-06T18:53:43.168Z Last Updated: 2025-01-09T21:47:19.552Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-755 Description: In mintplex-labs/anything-llm, a vulnerability exists in the thread update process that allows users with Default or Manager roles to escalate their privileges to Administrator. The issue arises from improper input validation when handling HTTP POST requests to the endpoint `/workspace/:slug/thread/:threadSlug/update`. Specifically, the application fails to validate or check user input before passing it to the `work
/:threadSlug/update`. Specifically, the application fails to validate or check user input before passing it to the `workspace_thread` Prisma model for execution. This oversight allows attackers to craft a Prisma relation query operation that manipulates the `users` model to change a user's role to admin. Successful exploitation grants attackers the highest level of user privileges, enabling them to see and perform all actions within the system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/745f5c80-14ea-4055-9f15-a066ae93e5a3 - https://github.com/mintplex-labs/anything-llm/commit/200bd7f0615347ed2efc07903d510e5a208b0afc
CVE ID: CVE-2024-3151 State: PUBLISHED Published: 2024-04-02T17:00:04.919Z Last Updated: 2025-02-27T20:23:39.774Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Bdtask Products: Multi-Store Inventory Management System Problem Types: CWE-352 Description: A vulnerability, which was classified as problematic, was found in Bdtask Multi-Store Inventory Management System up to 20240325. Affected is an unknown function of the file /stockmovment/stockmovment/delete/ of the component Stock Movement Page. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vu
e to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-258924. NOTE: The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.258924 - https://vuldb.com/?ctiid.258924 - https://vuldb.com/?submit.303898 - https://drive.google.com/file/d/1oTqULJy357Z4dk85vPR_yMFXRNhwZywX/view?usp=sharing
CVE ID: CVE-2024-3152 State: PUBLISHED Published: 2024-06-06T17:19:15.397Z Last Updated: 2025-10-15T12:50:23.189Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-918 Description: mintplex-labs/anything-llm is vulnerable to multiple security issues due to improper input validation in several endpoints. An attacker can exploit these vulnerabilities to escalate privileges from a default user role to an admin role, read and delete arbitrary files on the system, and perform Server-Side Request Forgery (SSRF) attacks. The vulnerabilities are present in the `/request-token`, `/workspace/:slug/threa
er-Side Request Forgery (SSRF) attacks. The vulnerabilities are present in the `/request-token`, `/workspace/:slug/thread/:threadSlug/update`, `/system/remove-logo`, `/system/logo`, and collector's `/process` endpoints. These issues are due to the application's failure to properly validate user input before passing it to `prisma` functions and other critical operations. Affected versions include the latest version prior to 1.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/46034fa0-d623-49f8-8ee8-390390181373 - https://github.com/mintplex-labs/anything-llm/commit/200bd7f0615347ed2efc07903d510e5a208b0afc
CVE ID: CVE-2024-3153 State: PUBLISHED Published: 2024-06-06T18:40:53.604Z Last Updated: 2024-08-01T20:05:07.642Z Severity: MEDIUM (CVSS 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-400 Description: mintplex-labs/anything-llm is affected by an uncontrolled resource consumption vulnerability in its upload file endpoint, leading to a denial of service (DOS) condition. Specifically, the server can be shut down by sending an invalid upload request. An attacker with the ability to upload documents can exploit this vulnerability to cause a DOS condition by manipulating the upload request. Additional Analyst Notes:
s can exploit this vulnerability to cause a DOS condition by manipulating the upload request. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/7bb08e7b-fd99-411e-99bc-07f81f474635 - https://github.com/mintplex-labs/anything-llm/commit/b8d37d9f43af2facab4c51146a46229a58cb53d9
CVE ID: CVE-2024-3154 State: PUBLISHED Published: 2024-04-26T03:12:38.036Z Last Updated: 2025-11-20T07:17:45.415Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Red Hat Products: Red Hat OpenShift Container Platform 4.12, Red Hat OpenShift Container Platform 4.13, Red Hat OpenShift Container Platform 4.14, Red Hat OpenShift Container Platform 4.15, Red Hat OpenShift Container Platform 3.11 Problem Types: CWE-77 Description: A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the host system. Additional Analyst Notes: -
reate a pod with an arbitrary annotation may perform an arbitrary action on the host system. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://access.redhat.com/errata/RHSA-2024:2669 - https://access.redhat.com/errata/RHSA-2024:2672 - https://access.redhat.com/errata/RHSA-2024:2784 - https://access.redhat.com/errata/RHSA-2024:3496 - https://access.redhat.com/security/cve/CVE-2024-3154 - https://bugzilla.redhat.com/show_bug.cgi?id=2272532 - https://github.com/cri-o/cri-o/security/advisories/GHSA-2cgq-h8xw-2v5j - https://github.com/opencontainers/runc/pull/4217 - https://github.com/opencontainers/runtime-spec/blob/main/features.md#unsafe-annotati
com/opencontainers/runc/pull/4217 - https://github.com/opencontainers/runtime-spec/blob/main/features.md#unsafe-annotations-in-configjson
CVE ID: CVE-2024-3155 State: PUBLISHED Published: 2024-05-21T02:32:59.318Z Last Updated: 2024-08-01T20:05:07.517Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: pickplugins Products: Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks Problem Types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) Description: The Post Grid, Form Maker, Popup Maker, WooCommerce Blocks, Post Blocks, Post Carousel – Combo Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 2.2.80 due to insufficient input sanitizat
s-Site Scripting via several parameters in all versions up to, and including, 2.2.80 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/84bc611c-c38a-4282-9a9b-5bb9157fb1de?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3084503%40post-grid%2Ftrunk&old=3078364%40post-grid%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-3156 State: PUBLISHED Published: 2024-04-06T14:53:33.759Z Last Updated: 2025-11-04T18:30:50.607Z Vendors: Google Products: Chrome Problem Types: Inappropriate implementation Description: Inappropriate implementation in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/329130358 - https://lists.fedoraproject.org/archives/list/package-annou
esktop.html - https://issues.chromium.org/issues/329130358 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVEJEW7UCSUSK2J2FYQRZZPI74P2D3JP/
CVE ID: CVE-2024-3157 State: PUBLISHED Published: 2024-04-10T18:41:38.145Z Last Updated: 2025-03-27T15:21:03.544Z Vendors: Google Products: Chrome Problem Types: Out of bounds write Description: Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via specific UI gestures. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_10.html - https://issues.chromium.org/issues/331237485 - https://lists.fedoraproject.org
able-channel-update-for-desktop_10.html - https://issues.chromium.org/issues/331237485 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NDHNEFD76ORM7WBWAEZT6HSYDMZVIED4/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5EW66LXDACTB5FCHLUPZOGD2KA2J62Q2/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVEJEW7UCSUSK2J2FYQRZZPI74P2D3JP/
CVE ID: CVE-2024-3158 State: PUBLISHED Published: 2024-04-06T14:53:34.146Z Last Updated: 2025-11-04T18:30:51.805Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Bookmarks in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/329965696 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/messa
mium.org/issues/329965696 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVEJEW7UCSUSK2J2FYQRZZPI74P2D3JP/
CVE ID: CVE-2024-3159 State: PUBLISHED Published: 2024-04-06T14:53:34.475Z Last Updated: 2025-11-04T18:30:53.049Z Vendors: Google Products: Chrome Problem Types: Out of bounds memory access Description: Out of bounds memory access in V8 in Google Chrome prior to 123.0.6312.105 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/330760873 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproje
/issues.chromium.org/issues/330760873 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/EVEJEW7UCSUSK2J2FYQRZZPI74P2D3JP/
CVE ID: CVE-2024-3160 State: PUBLISHED Published: 2024-04-02T02:31:04.579Z Last Updated: 2024-08-26T14:36:13.448Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Intelbras Products: MHDX 1004, MHDX 1008, MHDX 1016, MHDX 5016, HDCVI 1008, HDCVI 1016 Problem Types: CWE-200 Description: ** DISPUTED ** A vulnerability, which was classified as problematic, was found in Intelbras MHDX 1004, MHDX 1008, MHDX 1016, MHDX 5016, HDCVI 1008 and HDCVI 1016 up to 20240401. This affects an unknown part of the file /cap.js of the component HTTP GET Request Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit h
Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The identifier VDB-258933 was assigned to this vulnerability. NOTE: The vendor explains that they do not classify the information shown as sensitive and therefore there is no vulnerability which is about to harm the user. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.258933 - https://vuldb.com/?ctiid.258933 - https://vuldb.com/?submit.305410 - https://github.com/netsecfish/intelbras_cap_js
CVE ID: CVE-2024-3161 State: PUBLISHED Published: 2024-05-02T16:52:02.521Z Last Updated: 2024-08-01T20:05:08.427Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: jegtheme Products: Jeg Elementor Kit Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the countdown widget's attributes in all versions up to, and including, 2.6.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web script
g. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/48a13fb7-bf1a-4bf2-ac3b-3b5a75fec616?source=cve - https://plugins.trac.wordpress.org/browser/jeg-elementor-kit/trunk/assets/js/elements/countdown.js#L93 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3077328%40jeg-elementor-kit%2Ftrunk&old=3062484%40jeg-elementor-kit%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-3162 State: PUBLISHED Published: 2024-04-03T02:32:46.566Z Last Updated: 2024-08-09T17:24:38.211Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: jegtheme Products: Jeg Elementor Kit Problem Types: CWE-87 Description: The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Testimonial Widget Attributes in all versions up to, and including, 2.6.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor access or higher, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2024-3272
her, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. CVE-2024-32721 is likely a duplicate of this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/d54c7623-25af-4bf1-a6e0-9022ec26f391?source=cve - https://plugins.trac.wordpress.org/changeset/3062484
CVE ID: CVE-2024-3163 State: PUBLISHED Published: 2024-09-12T06:00:02.115Z Last Updated: 2024-09-12T14:16:56.765Z Vendors: Unknown Products: Easy Property Listings Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Easy Property Listings WordPress plugin before 3.5.4 does not have CSRF check when deleting contacts in bulk, which could allow attackers to make a logged in admin delete them via a CSRF attack Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/f89c8654-5486-4939-880d-101f33d359c0/
CVE ID: CVE-2024-3164 State: PUBLISHED Published: 2024-04-01T21:27:51.580Z Last Updated: 2024-09-30T15:30:31.887Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: dotCMS Products: dotCMS core Problem Types: CWE-284 Description: In dotCMS dashboard, the Tools and Log Files tabs under System → Maintenance Portlet, which is and always has been an Admin portlet, is accessible to anyone with that portlet and not just to CMS Admins. Users that get site admin but not a system admin, should not have access to the System Maintenance → Tools portlet. This would share database username and password under Log Files and download DB Dump and other dotCMS Content under Tool
This would share database username and password under Log Files and download DB Dump and other dotCMS Content under Tools. Nothing in the System → Maintenance should be displayed for users with site admin role. Only system admins must have access to System Maintenance. OWASP Top 10 - A01) Broken Access Control OWASP Top 10 - A04) Insecure Design Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.dotcms.com/security/SI-69 - https://github.com/dotCMS/core/pull/27912 - https://github.com/dotCMS/core/issues/27909
CVE ID: CVE-2024-3165 State: PUBLISHED Published: 2024-04-01T21:38:04.085Z Last Updated: 2024-09-30T15:27:54.804Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N) Vendors: dotCMS Products: dotCMS core Problem Types: CWE-532 Description: System->Maintenance-> Log Files in dotCMS dashboard is providing the username/password for database connections in the log output. Nevertheless, this is a moderate issue as it requires a backend admin as well as that dbs are locked down by environment. OWASP Top 10 - A05) Insecure Design OWASP Top 10 - A05) Security Misconfiguration OWASP Top 10 - A09) Security Logging and Monitoring Failure Additional Analyst Notes: - CVE Program Cont
isconfiguration OWASP Top 10 - A09) Security Logging and Monitoring Failure Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dotcms.com/security/SI-70 - https://github.com/dotCMS/core/issues/27910 - https://github.com/dotCMS/core/pull/28006
CVE ID: CVE-2024-3166 State: PUBLISHED Published: 2024-06-06T18:23:36.035Z Last Updated: 2024-08-01T20:05:07.541Z Severity: LOW (CVSS 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N) Vendors: mintplex-labs Products: mintplex-labs/anything-llm Problem Types: CWE-79 Description: A Cross-Site Scripting (XSS) vulnerability exists in mintplex-labs/anything-llm, affecting both the desktop application version 1.2.0 and the latest version of the web application. The vulnerability arises from the application's feature to fetch and embed content from websites into workspaces, which can be exploited to execute arbitrary JavaScript code. In the desktop application, this flaw can be escalated to Remote
can be exploited to execute arbitrary JavaScript code. In the desktop application, this flaw can be escalated to Remote Code Execution (RCE) due to insecure application settings, specifically the enabling of 'nodeIntegration' and the disabling of 'contextIsolation' in Electron's webPreferences. The issue has been addressed in version 1.4.2 of the desktop application. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://huntr.com/bounties/af288bd3-8824-4216-a294-ae9fb444e5db - https://github.com/mintplex-labs/anything-llm/commit/fa27103d032c58904c49b92ee13fabc19a20a5ce
CVE ID: CVE-2024-3167 State: PUBLISHED Published: 2024-04-09T18:59:11.350Z Last Updated: 2024-08-01T20:05:07.664Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: oceanwp Products: Ocean Extra Problem Types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Description: The Ocean Extra plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘twitter_username’ parameter in versions up to, and including, 2.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pa
ossible for authenticated attackers, with contributor-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/a292579c-9755-4bd4-996c-23d19ca1c197?source=cve - https://plugins.trac.wordpress.org/browser/ocean-extra/tags/2.2.6/includes/widgets/social-share.php#L269 - https://plugins.trac.wordpress.org/changeset/3066649/
CVE ID: CVE-2024-3168 State: PUBLISHED Published: 2024-07-16T22:14:01.749Z Last Updated: 2025-03-13T13:49:43.950Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in DevTools in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html - https://issues.chromium.org/issues/323813642
CVE ID: CVE-2024-3169 State: PUBLISHED Published: 2024-07-16T22:14:02.015Z Last Updated: 2024-08-01T20:05:08.326Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in V8 in Google Chrome prior to 121.0.6167.139 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_30.html - https://issues.chromium.org/issues/41491234
CVE ID: CVE-2024-3170 State: PUBLISHED Published: 2024-07-16T22:14:02.277Z Last Updated: 2024-08-01T20:05:07.630Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/41488824
CVE ID: CVE-2024-3171 State: PUBLISHED Published: 2024-07-16T22:14:02.784Z Last Updated: 2024-08-01T20:05:07.531Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/02/stable-channel-update-for-desktop_20.html - https://issues.chromium.org/issues/41483350
CVE ID: CVE-2024-3172 State: PUBLISHED Published: 2024-07-16T22:14:03.028Z Last Updated: 2025-03-18T14:05:07.085Z Vendors: Google Products: Chrome Problem Types: Insufficient data validation Description: Insufficient data validation in DevTools in Google Chrome prior to 121.0.6167.85 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop_23.html - https://issues.chromium.org/issues/40942152