CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Google Chrome Skia Graphics Library Integer Overflow Vulnerability (CVE-2023-6345) Technical Advisory
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 119.0.6045.199
[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a malicious file to escape the browser sandbox and execute arbitrary code
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable channel (119.0.6045.199 or higher)
Google Chrome Skia Graphics Library Integer Overflow Vulnerability (CVE-2023-2136) Technical Analysis and Remediation Guide
[Affected Scope] Google Chrome and Chromium-based browsers prior to version 112.0.5615.137
[Impact] A remote attacker who has compromised the renderer process can potentially perform a sandbox escape and execute arbitrary code via a crafted HTML page
[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (112.0.5615.137 or higher)
Adobe Reader and Acrobat Integer Overflow Remote Code Execution Vulnerability (CVE-2013-2729)
[Affected Scope] Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03
[Impact] Attackers can execute arbitrary code with the privileges of the logged-in user and compromise the host system via a specially crafted PDF document
[Mitigation] Immediately update affected installations to patched versions (9.5.5, 10.1.7, 11.0.03 or later) or migrate to the latest Adobe Acrobat Reader DC