Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-0195 State: PUBLISHED Published: 2024-01-02T21:00:05.440Z Last Updated: 2025-06-17T20:29:06.748Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: spider-flow Problem Types: CWE-94 Description: A vulnerability, which was classified as critical, was found in spider-flow 0.4.3. Affected is the function FunctionService.saveFunction of the file src/main/java/org/spiderflow/controller/FunctionController.java. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-249510 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program
ic and may be used. VDB-249510 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249510 - https://vuldb.com/?ctiid.249510 - https://github.com/laoquanshi/puppy/blob/main/spider-flow%20code%20injection%20causes%20rce.md
CVE ID: CVE-2024-0196 State: PUBLISHED Published: 2024-01-02T22:00:05.698Z Last Updated: 2025-06-17T20:29:06.880Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: Magic-Api Problem Types: CWE-94 Description: A vulnerability has been found in Magic-Api up to 2.0.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /resource/file/api/save?auto=1. The manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249511. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment:
ntifier of this vulnerability is VDB-249511. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.249511 - https://vuldb.com/?ctiid.249511 - https://github.com/laoquanshi/puppy/blob/main/Magic-Api%20Code%20Execution%20Vulnerability.md
CVE ID: CVE-2024-0197 State: PUBLISHED Published: 2024-02-27T12:48:13.263Z Last Updated: 2024-08-09T15:26:44.274Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Thales Products: Sentinel HASP LDK Problem Types: CWE-269 Description: A flaw in the installer for Thales SafeNet Sentinel HASP LDK prior to 9.16 on Windows allows an attacker to escalate their privilege level via local access. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://supportportal.thalesgroup.com
CVE ID: CVE-2024-0198 State: REJECTED Published: N/A Last Updated: 2025-02-11T01:05:53.130Z Description: No description available.
CVE ID: CVE-2024-0199 State: PUBLISHED Published: 2024-03-07T00:39:50.159Z Last Updated: 2025-04-16T15:53:24.694Z Severity: HIGH (CVSS 7.7 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:N) Vendors: GitLab Products: GitLab Problem Types: CWE-863 Description: An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/436977 - https://hackerone.com/r
t: - CVE Program Container: References: - https://gitlab.com/gitlab-org/gitlab/-/issues/436977 - https://hackerone.com/reports/2295423 - https://about.gitlab.com/releases/2024/03/06/security-release-gitlab-16-9-2-released/
CVE ID: CVE-2024-0200 State: PUBLISHED Published: 2024-01-16T18:50:48.931Z Last Updated: 2024-08-01T17:41:16.005Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:L) Vendors: GitHub Products: Enterprise Server Problem Types: CWE-470 Description: An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. This vulnerability could lead to the execution of user-controlled methods and remote code execution. To exploit this bug, an actor would need to be logged into an account on the GHES instance with the organization owner role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was
the organization owner role. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.12 and was fixed in versions 3.8.13, 3.9.8, 3.10.5, and 3.11.3. This vulnerability was reported via the GitHub Bug Bounty program. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://docs.github.com/en/enterprise-server@3.8/admin/release-notes#3.8.13 - https://docs.github.com/en/enterprise-server@3.9/admin/release-notes#3.9.8 - https://docs.github.com/en/enterprise-server@3.10/admin/release-notes#3.10.5 - https://docs.github.com/en/enterprise-server@3.11/admin/release-notes#3.11.3
CVE ID: CVE-2024-0201 State: PUBLISHED Published: 2024-01-03T09:31:51.694Z Last Updated: 2025-04-17T18:37:13.367Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L) Vendors: webcodingplace Products: Product Expiry for WooCommerce Problem Types: CWE-862 Missing Authorization Description: The Product Expiry for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_settings' function in versions up to, and including, 2.5. This makes it possible for authenticated attackers, with subscriber-level permissions or above to update plugin settings. Additional Analyst Notes: - CVE Program Container: - CIS
ubscriber-level permissions or above to update plugin settings. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c4006612-770a-482f-a8c2-e62f607914a9?source=cve - https://plugins.trac.wordpress.org/browser/product-expiry-for-woocommerce/tags/2.5/product-expiry-for-woocommerce.php#L263 - https://plugins.trac.wordpress.org/browser/product-expiry-for-woocommerce/tags/2.6/product-expiry-for-woocommerce.php?rev=3014924#L263
CVE ID: CVE-2024-0202 State: PUBLISHED Published: 2024-02-05T20:44:24.827Z Last Updated: 2024-08-01T17:41:16.108Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N) Problem Types: CWE-208 Description: A security vulnerability has been identified in the cryptlib cryptographic library when cryptlib is compiled with the support for RSA key exchange ciphersuites in TLS (by setting the USE_RSA_SUITES define), it will be vulnerable to the timing variant of the Bleichenbacher attack. An attacker that is able to perform a large number of connections to the server will be able to decrypt RSA ciphertexts or forge signatures using server's certificate. Additional Analyst Notes: -
ver will be able to decrypt RSA ciphertexts or forge signatures using server's certificate. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2256518
CVE ID: CVE-2024-0203 State: PUBLISHED Published: 2024-03-07T19:32:59.943Z Last Updated: 2024-08-02T19:55:51.792Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: UnitedOver Products: Digits: WordPress Mobile Number Signup and Login Problem Types: CWE-352 Cross-Site Request Forgery (CSRF) Description: The Digits plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.4.1. This is due to missing nonce validation in the 'digits_save_settings' function. This makes it possible for unauthenticated attackers to modify the default role of registered users to elevate user privileges via a forged request granted they can tric
ers to modify the default role of registered users to elevate user privileges via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/84f2afb4-f1c6-4313-8958-38f1b5140a67?source=cve - https://digits.unitedover.com/changelog/
CVE ID: CVE-2024-0204 State: PUBLISHED Published: 2024-01-22T18:05:13.194Z Last Updated: 2025-05-30T14:22:31.288Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Fortra Products: GoAnywhere MFT Problem Types: CWE-425 Description: Authentication bypass in Fortra's GoAnywhere MFT prior to 7.4.1 allows an unauthorized user to create an admin user via the administration portal. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fortra.com/security/advisory/fi-2024-001 - https://my.goanywhere.com/webclient/ViewSecurityAdvisories.xhtml - http://packetstormsecurity.com/files/176683/GoAnywhere-MFT-Authentication-B
com/webclient/ViewSecurityAdvisories.xhtml - http://packetstormsecurity.com/files/176683/GoAnywhere-MFT-Authentication-Bypass.html - http://packetstormsecurity.com/files/176974/Fortra-GoAnywhere-MFT-Unauthenticated-Remote-Code-Execution.html
CVE ID: CVE-2024-0206 State: PUBLISHED Published: 2024-01-09T12:56:46.957Z Last Updated: 2025-04-17T17:54:03.046Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Trellix Products: Anti-Malware Engine Problem Types: CWE-59 Description: A symbolic link manipulation vulnerability in Trellix Anti-Malware Engine prior to the January 2024 release allows an authenticated local user to potentially gain an escalation of privileges. This was achieved by adding an entry to the registry under the Trellix ENS registry folder with a symbolic link to files that the user wouldn't normally have permission to. After a scan, the Engine would follow the links and remove the files
that the user wouldn't normally have permission to. After a scan, the Engine would follow the links and remove the files Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kcm.trellix.com/corporate/index?page=content&id=SB10415
CVE ID: CVE-2024-0207 State: PUBLISHED Published: 2024-01-03T07:31:10.632Z Last Updated: 2025-06-17T20:29:08.732Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-125 Description: HTTP3 dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2024-03.html - https://gitlab.com/wireshark/wireshark/-/issues/19502
CVE ID: CVE-2024-0208 State: PUBLISHED Published: 2024-01-03T07:31:15.641Z Last Updated: 2025-11-03T21:50:50.735Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-230 Description: GVCP dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2024-01.html - https://gitlab.com/wireshark/wireshark/-/issues/19496
CVE ID: CVE-2024-0209 State: PUBLISHED Published: 2024-01-03T07:31:20.633Z Last Updated: 2025-11-03T21:50:52.188Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-476 Description: IEEE 1609.2 dissector crash in Wireshark 4.2.0, 4.0.0 to 4.0.11, and 3.6.0 to 3.6.19 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2024-02.html - https://gitlab.com/wireshark/wireshark/-/issues/19501
CVE ID: CVE-2024-0210 State: PUBLISHED Published: 2024-01-03T07:31:25.644Z Last Updated: 2025-06-17T20:29:08.871Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-674 Description: Zigbee TLV dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2024-04.html - https://gitlab.com/wireshark/wireshark/-/issues/19504
CVE ID: CVE-2024-0211 State: PUBLISHED Published: 2024-01-03T07:31:30.639Z Last Updated: 2025-11-03T21:50:53.647Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-835 Description: DOCSIS dissector crash in Wireshark 4.2.0 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2024-05.html - https://gitlab.com/wireshark/wireshark/-/issues/19557
CVE ID: CVE-2024-0212 State: PUBLISHED Published: 2024-01-29T09:13:44.939Z Last Updated: 2025-06-06T17:40:11.060Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Cloudflare Products: Cloudflare-WordPress Problem Types: CWE-284 Description: The Cloudflare Wordpress plugin was found to be vulnerable to improper authentication. The vulnerability enables attackers with a lower privileged account to access data from the Cloudflare API. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cloudflare/Cloudflare-WordPress/security/advisories/GHSA-h2fj-7r3m-7gf2 - https://github.com/cloudflare/Cloudflare-WordPress
dflare/Cloudflare-WordPress/security/advisories/GHSA-h2fj-7r3m-7gf2 - https://github.com/cloudflare/Cloudflare-WordPress/releases/tag/v4.12.3
CVE ID: CVE-2024-0213 State: PUBLISHED Published: 2024-01-09T13:01:13.209Z Last Updated: 2025-06-17T14:55:56.704Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Trellix Products: Trellix Agent (TA) Problem Types: CWE-120 Description: A buffer overflow vulnerability in TA for Linux and TA for MacOS prior to 5.8.1 allows a local user to gain elevated permissions, or cause a Denial of Service (DoS), through exploiting a memory corruption issue in the TA service, which runs as root. This may also result in the disabling of event reporting to ePO, caused by failure to validate input from the file correctly. Additional Analyst Notes: - CVE Program Container: - CISA
, caused by failure to validate input from the file correctly. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://kcm.trellix.com/corporate/index?page=content&id=SB10416
CVE ID: CVE-2024-0216 State: PUBLISHED Published: 2024-04-30T01:54:18.196Z Last Updated: 2024-08-01T17:41:16.217Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: levertechadmin Products: Google Doc Embedder Problem Types: CWE-918 Server-Side Request Forgery (SSRF) Description: The Google Doc Embedder plugin for WordPress is vulnerable to Server Side Request Forgery via the 'gview' shortcode in versions up to, and including, 2.6.4. This can allow authenticated attackers with contributor-level permissions or above to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal servi
trary locations originating from the web application and can be used to query and modify information from internal services. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/75e55138-b091-4113-89da-e1ca45fb99ea?source=cve - https://plugins.trac.wordpress.org/browser/google-document-embedder/tags/2.6.4/functions.php#L187
CVE ID: CVE-2024-0217 State: PUBLISHED Published: 2024-01-03T17:04:37.841Z Last Updated: 2025-11-21T06:24:15.764Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Red Hat Products: Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9 Problem Types: CWE-416 Description: A use-after-free flaw was found in PackageKitd. In some conditions, the order of cleanup mechanics for a transaction could be impacted. As a result, some memory access could occur on memory regions that were previously freed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region
ed. Once freed, a memory region can be reused for other allocations and any previously stored data in this memory region is considered lost. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2024-0217 - https://bugzilla.redhat.com/show_bug.cgi?id=2256624 - https://github.com/PackageKit/PackageKit/commit/64278c9127e3333342b56ead99556161f7e86f79
CVE ID: CVE-2024-0218 State: PUBLISHED Published: 2024-04-10T15:55:59.971Z Last Updated: 2024-09-20T12:19:42.524Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Nozomi Networks Products: Guardian Problem Types: CWE-1286 Description: A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allows an unauthenticated attacker sending specially crafted malformed network packets to cause the IDS module to stop updating nodes, links, and assets. Network traffic may not be analyzed until the IDS module is restarted. Additional Analyst Notes: - CVE P
ks, and assets. Network traffic may not be analyzed until the IDS module is restarted. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://security.nozominetworks.com/NN-2024:1-01
CVE ID: CVE-2024-0219 State: PUBLISHED Published: 2024-01-31T15:11:21.337Z Last Updated: 2025-05-29T15:03:44.426Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Progress Software Products: Telerik JustDecompile Problem Types: CWE-269 Description: In Telerik JustDecompile versions prior to 2024 R1, a privilege elevation vulnerability has been identified in the applications installer component. In an environment where an existing Telerik JustDecompile install is present, a lower privileged user has the ability to manipulate the installation package to elevate their privileges on the underlying operating system. Additional Analyst Notes: - CVE Program Container:
ckage to elevate their privileges on the underlying operating system. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.telerik.com/products/decompiler.aspx - https://docs.telerik.com/devtools/justdecompile/knowledge-base/legacy-installer-vulnerability
CVE ID: CVE-2024-0220 State: PUBLISHED Published: 2024-02-22T10:15:44.750Z Last Updated: 2024-09-19T17:24:51.723Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H) Vendors: B&R Industrial Automation Products: Automation Studio, Technology Guarding Problem Types: CWE-1240, CWE-319, CWE-94 Description: B&R Automation Studio Upgrade Service and B&R Technology Guarding use insufficient cryptography for communication to the upgrade and the licensing servers. A network-based attacker could exploit the vulnerability to execute arbitrary code on the products or sniff sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https:/
sniff sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.br-automation.com/fileadmin/SA23P019_Automation_Studio_Upgrade_Service_uses_insufficient_encryption.pdf-1b3b181c.pdf
CVE ID: CVE-2024-0221 State: PUBLISHED Published: 2024-02-05T21:21:40.205Z Last Updated: 2024-08-21T17:50:04.788Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: 10web Products: Photo Gallery by 10Web – Mobile-Friendly Image Gallery Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.8.19 via the rename_item function. This makes it possible for authenticated attackers to rename arbitrary files on the server. This can lead to site takeovers i
makes it possible for authenticated attackers to rename arbitrary files on the server. This can lead to site takeovers if the wp-config.php file of a site can be renamed. By default this can be exploited by administrators only. In the premium version of the plugin, administrators can give gallery management permissions to lower level users, which might make this exploitable by users as low as contributors. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3a3b8f32-f29d-4e67-8fad-202bfc8a9918?source=cve - https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L4
d-202bfc8a9918?source=cve - https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L441 - https://plugins.trac.wordpress.org/browser/photo-gallery/trunk/filemanager/controller.php#L291 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&new=3022981%40photo-gallery%2Ftrunk&old=3013021%40photo-gallery%2Ftrunk&sfp_email=&sfph_mail=
CVE ID: CVE-2024-0222 State: PUBLISHED Published: 2024-01-04T01:56:13.792Z Last Updated: 2025-06-18T15:40:08.394Z Vendors: Google Products: Chrome Problem Types: Use after free Description: Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html - https://crbug.com/1501798 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedor
or-desktop.html - https://crbug.com/1501798 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/ - https://security.gentoo.org/glsa/202401-34
CVE ID: CVE-2024-0223 State: PUBLISHED Published: 2024-01-04T01:56:14.165Z Last Updated: 2025-06-18T15:40:55.097Z Vendors: Google Products: Chrome Problem Types: Heap buffer overflow Description: Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html - https://crbug.com/1505009 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T
ug.com/1505009 - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/ - https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/ - https://security.gentoo.org/glsa/202401-34