Category

Browsers

10,973 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3,584 results · Clear filters · Feed

High 8.8

CVE-2022-2853

Heap buffer overflow in Downloads in Google Chrome on Android prior to 104.0.5112.101 allowed a remote attacker who had…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu

Sep 26, 2022
High 8.8

CVE-2022-22629 Public exploit

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari…

Apple watchOS tvOS Safari Browsers Debian Ubuntu Alpine

Sep 23, 2022
High 8.8

CVE-2022-22628

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, Safar…

Apple watchOS tvOS Safari Browsers Debian Ubuntu Alpine

Sep 23, 2022
High 8.8

CVE-2022-22610

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Saf…

Apple watchOS tvOS Safari Browsers Ubuntu

Sep 23, 2022
High 8.8

CVE-2022-22637

A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.3, Safari 15.4, wa…

Apple watchOS tvOS Safari Browsers Debian Ubuntu Alpine

Sep 23, 2022
High 8.8

CVE-2022-22624

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.3, iOS 1…

Apple tvOS Safari qtwebkit-source Browsers Debian Ubuntu Alpine

Sep 23, 2022
High 8.8

CVE-2022-32912

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 a…

Apple iOS and iPadOS Safari iOS iOS Browsers

Sep 20, 2022
High 8.8

CVE-2022-32886

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in Safari 16, iOS 16, iOS 15.7…

Apple iOS and iPadOS Safari iOS iOS Browsers Debian Ubuntu

Sep 20, 2022
High 7.7

CVE-2022-38012

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Sep 13, 2022
High 8.1

CVE-2022-34383

Dell Edge Gateway 5200 (EGW) versions before 1.03.10 contain an operating system command injection vulnerability. A loc…

Dell Edge Gateway 5200 Browsers

Aug 31, 2022
High 8.8

CVE-2022-32893 Exploited EPSS 10%

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 15.6.1 and iPadOS …

Apple macOS iOS and iPadOS Safari macOS iOS Browsers Debian Ubuntu

Aug 24, 2022
KEV Aug 18, 2022
High 7.8

CVE-2022-21148

Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authent…

Browsers

Aug 18, 2022
High 7.8

CVE-2022-25966

Improper access control in the Intel(R) Edge Insights for Industrial software before version 2.6.1 may allow an authent…

Browsers

Aug 18, 2022
High 7.5

CVE-2022-35796

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Aug 9, 2022
High 8.3

CVE-2022-33636

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Aug 9, 2022
High 8.8

CVE-2022-2294 Exploited · Ransomware EPSS 71%

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploi…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 28, 2022
KEV Aug 25, 2022
High 8.8

CVE-2022-1364 Exploited Public exploit EPSS 14%

Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 26, 2022
KEV Apr 15, 2022
High 8.8

CVE-2022-1096 Exploited Public exploit EPSS 25%

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corru…

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine

Jul 22, 2022
KEV Mar 28, 2022
High 7.5

CVE-2022-30792

CODESYS: CmpChannelServer, CmpChannelServerEmbedded allow unauthenticated attackers to block all their available communication channels

In CmpChannelServer of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new communication channel connections. Existing connections are not affected.

CODESYS CODESYS Control for emPC-A/iMX6 SL CODESYS Control for Linux SL CODESYS Control for PFC200 SL Linux Windows Browsers ICS / OT

Jul 11, 2022
High 7.5

CVE-2022-30791

CODESYS V3: CmpBlkDrvTcp allows unauthenticated attackers to block all its available TCP connections

In CmpBlkDrvTcp of CODESYS V3 in multiple versions an uncontrolled ressource consumption allows an unauthorized attacker to block new TCP connections. Existing connections are not affected.

CODESYS CODESYS Control for PFC100 SL CODESYS Control for WAGO Touch Panels 600 SL CODESYS Control for emPC-A/iMX6 SL Linux Windows Browsers ICS / OT

Jul 11, 2022
High 8.3

CVE-2022-33680

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jul 7, 2022
High 8.3

CVE-2022-33638

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jun 29, 2022
High 8.3

CVE-2022-30192

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jun 29, 2022
High 8.3

CVE-2022-33639

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jun 29, 2022
High 7.5

CVE-2022-31805

Insecure transmission of credentials

In the CODESYS Development System multiple components in multiple versions transmit the passwords for the communication between clients and servers unprotected.

CODESYS CODESYS HMI (SL) CODESYS Development System CODESYS Edge Gateway for Windows Windows Browsers ICS / OT

Jun 24, 2022
High 8.3

CVE-2022-22021

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jun 15, 2022
High 8.3

CVE-2022-30128

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jun 1, 2022
High 8.3

CVE-2022-30127

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Jun 1, 2022
High 7.5

CVE-2022-22517

Communication Components in multiple CODESYS products vulnerable to communication channel disruption

An unauthenticated, remote attacker can disrupt existing communication channels between CODESYS products by guessing a valid channel ID and injecting packets. This results in the communication channel to be closed.

CODESYS CODESYS Control for IOT2000 SL CODESYS Control for PFC100 SL CODESYS Control for WAGO Touch Panels 600 SL Linux Windows Browsers ICS / OT

Apr 7, 2022
High 7.1

CVE-2022-22514

Untrusted Pointer Dereference in multiple CODESYS products can lead to a DoS.

An authenticated, remote attacker can gain access to a dereferenced pointer contained in a request. The accesses can subsequently lead to local overwriting of memory in the CmpTraceMgr, whereby the attacker can neither gain the values read internally nor cont…

CODESYS CODESYS Control for emPC-A/iMX6 SL CODESYS Control for Linux SL CODESYS Control for PFC200 SL Linux Windows Browsers ICS / OT

Apr 7, 2022
High 8.3

CVE-2022-26912

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Apr 5, 2022
High 8.3

CVE-2022-26909

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Apr 5, 2022
High 8.3

CVE-2022-26908

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Apr 5, 2022
High 8.3

CVE-2022-26900

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Apr 5, 2022
High 8.3

CVE-2022-26895

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Apr 5, 2022
High 8.3

CVE-2022-26894

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Apr 5, 2022
High 8.3

CVE-2022-26891

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Apr 5, 2022
High 8.3

CVE-2022-24475

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

Microsoft Microsoft Edge (Chromium-based) Browsers

Apr 5, 2022
High 8.8

CVE-2022-0609 Exploited EPSS 23%

Use after free in Animation

Use after free in Animation in Google Chrome prior to 98.0.4758.102 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Google Chrome chromium chromium-browser Browsers Debian Ubuntu Alpine NuGet

Apr 4, 2022
KEV Feb 15, 2022
High 8.0

CVE-2022-28145

Cross-site Scripting (XSS) vulnerability in Jenkins Continuous Integration with Toad Edge Plugin

Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier does not apply Content-Security-Policy headers to report files it serves, resulting in a stored cross-site scripting (XSS) exploitable by attackers with Item/Configure permission or otherwis…

Jenkins Project Jenkins Continuous Integration with Toad Edge Plugin org.jenkins-ci.plugins:ci-with-toad-edge Web / CMS Browsers Maven

Mar 29, 2022