deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2023-52548
Published: 2024-05-28
Description: Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26) Arbitrary Memory Corruption in SMI Handler of ThisiServicesSmm SMM module. This can be leveraged by a malicious OS attacker to corrupt arbitrary SMRAM memory and, in turn, lead to code execution in SMM
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-787
References: https://www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-cn; https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-en; https://www.huawei.com/cn/psirt/security-advisories/2024/huawei-sa-hppvtiroowtboamb-bb3261bd-cn
CVE: CVE-2023-52710
Published: 2024-05-28
Description: Huawei Matebook D16(Model: CREM-WXX9, BIOS: v2.26), As the communication buffer size hasn’t been properly validated to be of the expected size, it can partially overlap with the beginning SMRAM.This can be leveraged by a malicious OS attacker to corrupt data structures stored at the beginning of SMRAM and can potentially lead to code execution in SMM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-754, CWE-754
References: https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-hppvticfuoec-8ffde288-en; https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-hppvticfuoec-8ffde288-en
CVE: CVE-2023-52711
Published: 2024-05-28
Description: Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory thus potentially leading code execution in SMM
CVSS Score: 7.8 (HIGH)
CWE: CWE-284, CWE-401
References: https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-voiiaciahpp-6376e0c7-en; https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-voiiaciahpp-6376e0c7-en
CVE: CVE-2023-52712
Published: 2024-05-28
Description: Various Issues Due To Exposed SMI Handler in AmdPspP2CmboxV2. The first issue can be leveraged to bypass the protections that have been put in place by previous UEFI phases to prevent direct access to the SPI flash. The second issue can be used to both leak and corrupt SMM memory, thus potentially leading code execution in SMM
CVSS Score: 7.8 (HIGH)
CWE: CWE-284
References: https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-iiacviahpp-71ce77ee-en; https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-iiacviahpp-71ce77ee-en
CVE: CVE-2024-5410
Published: 2024-05-28
Description: Missing input validation in the ORing IAP-420 web-interface allows stored Cross-Site Scripting (XSS).This issue affects IAP-420 version 2.01e and below.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seclists.org/fulldisclosure/2024/May/36; https://cyberdanube.com/en/en-multiple-vulnerabilities-in-oring-iap420/; http://seclists.org/fulldisclosure/2024/May/36
CVE: CVE-2024-5411
Published: 2024-05-28
Description: Missing input validation and OS command integration of the input in the ORing IAP-420 web-interface allows authenticated command injection.This issue affects IAP-420 version 2.01e and below.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: http://seclists.org/fulldisclosure/2024/May/36; https://cyberdanube.com/en/en-multiple-vulnerabilities-in-oring-iap420/; http://seclists.org/fulldisclosure/2024/May/36
CVE: CVE-2023-37411
Published: 2024-05-28
Description: IBM Aspera Faspex 5.0.0 through 5.0.6 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  260139.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/260139; https://www.ibm.com/support/pages/node/7154977; https://exchange.xforce.ibmcloud.com/vulnerabilities/260139
CVE: CVE-2024-28793
Published: 2024-05-28
Description: IBM Engineering Workflow Management 7.0.2 and 7.0.3 is vulnerable to stored cross-site scripting. Under certain configurations, this vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.  IBM X-Force ID:  286830.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2024/05/24/2; https://exchange.xforce.ibmcloud.com/vulnerabilities/286830; https://www.ibm.com/support/pages/node/7154955
CVE: CVE-2024-2199
Published: 2024-05-28
Description: A denial of service vulnerability was found in 389-ds-base ldap server. This issue may allow an authenticated user to cause a server crash while modifying `userPassword` using malformed input.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-20
References: https://access.redhat.com/errata/RHSA-2024:3591; https://access.redhat.com/errata/RHSA-2024:3837; https://access.redhat.com/errata/RHSA-2024:4092
CVE: CVE-2024-3657
Published: 2024-05-28
Description: A flaw was found in 389-ds-base. A specially-crafted LDAP query can potentially cause a failure on the directory server, leading to a denial of service
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://access.redhat.com/errata/RHSA-2024:3591; https://access.redhat.com/errata/RHSA-2024:3837; https://access.redhat.com/errata/RHSA-2024:4092
CVE: CVE-2024-5413
Published: 2024-05-28
Description: A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/scheduled.php, all parameters. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to retrieve their session details.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-phpmybackuppro; https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-phpmybackuppro
CVE: CVE-2024-5414
Published: 2024-05-28
Description: A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/get_file.php, 'view' parameter. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to retrieve their session details.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-phpmybackuppro; https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-phpmybackuppro
CVE: CVE-2024-5415
Published: 2024-05-28
Description: A vulnerability have been discovered in PhpMyBackupPro affecting version 2.3 that could allow an attacker to execute XSS through /phpmybackuppro/backup.php, 'comments' and 'db' parameters. This vulnerabilities could allow an attacker to create a specially crafted URL and send it to a victim to retrieve their session details.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-phpmybackuppro; https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-vulnerability-phpmybackuppro
CVE: CVE-2023-35949
Published: 2024-05-28
Description: Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing geometric faces of an OFF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1784; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1784; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1784
CVE: CVE-2023-35950
Published: 2024-05-28
Description: Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing the header of an OFF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1784; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1784; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1784
CVE: CVE-2023-35951
Published: 2024-05-28
Description: Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing geometric vertices of an OFF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1784; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1784; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1784
CVE: CVE-2023-35952
Published: 2024-05-28
Description: Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing comments within the geometric faces section within an OFF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1784; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1784; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1784
CVE: CVE-2023-35953
Published: 2024-05-28
Description: Multiple stack-based buffer overflow vulnerabilities exist in the readOFF.cpp functionality of libigl v2.4.0. A specially-crafted .off file can lead to a buffer overflow. An attacker can arbitrary code execution to trigger these vulnerabilities.This vulnerability exists within the code responsible for parsing comments within the geometric vertices section within an OFF file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1784; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1784; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1784
CVE: CVE-2023-49600
Published: 2024-05-28
Description: An out-of-bounds write vulnerability exists in the PlyFile ply_cast_ascii functionality of libigl v2.5.0. A specially crafted .ply file can lead to a heap buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 8.1 (HIGH)
CWE: CWE-122, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2023-1879; https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1879; https://talosintelligence.com/vulnerability_reports/TALOS-2023-1879
CVE: CVE-2024-22181
Published: 2024-05-28
Description: An out-of-bounds write vulnerability exists in the readNODE functionality of libigl v2.5.0. A specially crafted .node file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.
CVSS Score: 7.8 (HIGH)
CWE: CWE-129, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1930; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1930; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1930
CVE: CVE-2024-23947
Published: 2024-05-28
Description: Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the `igl::MshLoader::parse_nodes` function while handling a `binary` `.msh` file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1926; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926
CVE: CVE-2024-23948
Published: 2024-05-28
Description: Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the `igl::MshLoader::parse_nodes` function while handling an `ascii`.msh` file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1926; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926
CVE: CVE-2024-23949
Published: 2024-05-28
Description: Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the `igl::MshLoader::parse_node_field` function while handling an `ascii`.msh` file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1926; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926
CVE: CVE-2024-23950
Published: 2024-05-28
Description: Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the `igl::MshLoader::parse_element_field` function while handling an `binary`.msh` file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1926; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926
CVE: CVE-2024-23951
Published: 2024-05-28
Description: Multiple improper array index validation vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds write. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the `igl::MshLoader::parse_element_field` function while handling an `ascii`.msh` file.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1926; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1926
CVE: CVE-2024-24583
Published: 2024-05-28
Description: Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.This vulnerabilitty concerns the`readMSH` function while processing `MshLoader::ELEMENT_TRI` elements.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1928; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1928; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1928
CVE: CVE-2024-24584
Published: 2024-05-28
Description: Multiple out-of-bounds read vulnerabilities exist in the readMSH functionality of libigl v2.5.0. A specially crafted .msh file can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability.This vulnerabilitty concerns the`readMSH` function while processing `MshLoader::ELEMENT_TET` elements.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-125
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1928; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1928; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1928
CVE: CVE-2024-24684
Published: 2024-05-28
Description: Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the header parsing occuring while processing an `.off`  file via the `readOFF` function. 


We can see above that at [0] a stack-based buffer called `comment` is defined with an hardcoded size of `1000 bytes`.  The call to `fscanf` at [1] is unsafe and if the first line of the header of the `.off` files is longer than 1000 bytes it will overflow the `header` buffer.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1929; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1929; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1929
CVE: CVE-2024-24685
Published: 2024-05-28
Description: Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the parsing of comments within the vertex section of an `.off`  file processed via the `readOFF` function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1929; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1929; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1929
CVE: CVE-2024-24686
Published: 2024-05-28
Description: Multiple stack-based buffer overflow vulnerabilities exist in the readOFF functionality of libigl v2.5.0. A specially crafted .off file can lead to stack-based buffer overflow. An attacker can provide a malicious file to trigger this vulnerability.This vulnerability concerns the parsing of comments within the faces section of an `.off`  file processed via the `readOFF` function.
CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1929; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1929; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1929
CVE: CVE-2024-29072
Published: 2024-05-28
Description: A privilege escalation vulnerability exists in the Foxit Reader 2024.2.0.25138. The vulnerability occurs due to improper certification validation of the updater executable before executing it. A low privilege user can trigger the update action which can result in unexpected elevation of privilege.
CVSS Score: 8.2 (HIGH)
CWE: CWE-295
References: https://talosintelligence.com/vulnerability_reports/TALOS-2024-1989; https://www.talosintelligence.com/vulnerability_reports/TALOS-2024-1989; https://talosintelligence.com/vulnerability_reports/TALOS-2024-1989
CVE: CVE-2024-5428
Published: 2024-05-28
Description: A vulnerability classified as problematic was found in SourceCodester Simple Online Bidding System 1.0. Affected by this vulnerability is the function save_product of the file /admin/index.php?page=manage_product of the component HTTP POST Request Handler. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-266383.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://github.com/kaikai145154/CVE-CSRF/blob/main/SourceCodester%20Simple%20Online%20Bidding%20System%20CSRF.md; https://vuldb.com/?ctiid.266383; https://vuldb.com/?id.266383
CVE: CVE-2024-2451
Published: 2024-05-28
Description: Improper fingerprint validation in the TeamViewer Client (Full & Host) prior Version 15.54 for Windows and macOS allows an attacker with administrative user rights to further elevate privileges via executable sideloading.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-347
References: https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1004/; https://www.teamviewer.com/en/resources/trust-center/security-bulletins/tv-2024-1004/
CVE: CVE-2024-35397
Published: 2024-05-28
Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 weas discovered to contain a command injection vulnerability in the NTPSyncWithHost function via the hostTime parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: http://totolink.com; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/NTPSyncWithHost/README.md; http://totolink.com
CVE: CVE-2024-35398
Published: 2024-05-28
Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function setMacFilterRules.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: http://totolink.com; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/setMacFilterRules/README.md; http://totolink.com
CVE: CVE-2024-35399
Published: 2024-05-28
Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the password parameter in the function loginAuth
CVSS Score: 8.8 (HIGH)
CWE: CWE-121
References: http://totolink.com; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/loginAuth/README.md; http://totolink.com
CVE: CVE-2024-35400
Published: 2024-05-28
Description: TOTOLINK CP900L v4.1.5cu.798_B20221228 was discovered to contain a stack overflow via the desc parameter in the function SetPortForwardRules
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-120
References: http://totolink.com; https://github.com/s4ndw1ch136/IOT-vuln-reports/blob/main/TOTOLINK%20CP900L/SetPortForwardRules/README.md; http://totolink.com
CVE: CVE-2024-3969
Published: 2024-05-28
Description: XML External Entity injection vulnerability found in OpenText™ iManager 3.2.6.0200. This could lead to remote code execution by parsing untrusted XML payload


CVSS Score: 7.8 (HIGH)
CWE: CWE-611, CWE-611
References: https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html; https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html
CVE: CVE-2024-4429
Published: 2024-05-28
Description: Cross-Site Request Forgery vulnerability has been discovered in OpenText™ iManager 3.2.6.0200. This
could lead to sensitive information disclosure.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-352, CWE-352
References: https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html; https://www.netiq.com/documentation/imanager-32/imanager326_patch3_hf1_releasenotes/data/imanager326_patch3_hf1_releasenotes.html
CVE: CVE-2024-5274
Published: 2024-05-28
Description: Type Confusion in V8 in Google Chrome prior to 125.0.6422.112 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-843, CWE-843
References: https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_23.html; https://issues.chromium.org/issues/341663589; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AVC3FNI7HZLVSRIFBVUSBHI233DZYBKP/