Open Source Vulnerabilities

qt5-qtwebengine

Use after free in Blink in Google Chrome prior to 89

librewolf, librewolf, librewolf, librewolf, librewolf

attacker who could have convinced a user to drag and drop an image to a filesystem could have manipulated the resulting filename to contain an executable extension, and by extension potentially tri...

musl

musl libc through 1

wireshark

In Wireshark 2

qt5-qtwebengine

Use after free in WebRTC in Google Chrome prior to 89

thunderbird, thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have occurred when the number of elements to replace was too large for the container

wireshark

In Wireshark 2

musl

In musl libc through 1

qt5-qtwebengine

Uninitialized data in PDFium in Google Chrome prior to 89

librewolf, librewolf, librewolf, librewolf, librewolf

Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an uninitialized pointer would have been freed despite never being allocated

wireshark

In Wireshark 2

qt5-qtwebengine

Use after free in Blink in Google Chrome prior to 89

pacman

pacman before 5

wireshark

In Wireshark 2

qt5-qtwebengine

Insufficient data validation in URL formatting in Google Chrome prior to 89

thunderbird, thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

malicious website that could create a popup could have resized the popup to overlay the address bar with its own content, resulting in potential user confusion or spoofing attacks

pacman

pacman before 5

wireshark

In Wireshark 2

qt5-qtwebengine

Inappropriate implementation in performance APIs in Google Chrome prior to 89

thunderbird, thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

<code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver content to Microsoft applications, bypassing the browser, when a user accepts a prompt

pacman

pacman before 5

wireshark

In Wireshark 2

qt5-qtwebengine

Use after free in Network Internals in Google Chrome on Linux prior to 89

librewolf, librewolf, librewolf, librewolf, librewolf

MediaError message property should be consistent to avoid leaking information about cross-origin resources; however for a same-site cross-origin resource, the message could have leaked information ...

wireshark

In Wireshark 2

qt5-qtwebengine

Inappropriate implementation in Compositing in Google Chrome on Linux and Windows prior to 89

supervisor

XML-RPC server in supervisor before 3

datadog-agent-fips-7.78-core-integrations

librewolf, librewolf, librewolf, librewolf, librewolf

ASN

wireshark

In Wireshark 2

qt5-qtwebengine

Inappropriate implementation in Site isolation in Google Chrome prior to 89

supervisor

In Supervisor through 4

librewolf, librewolf, librewolf, librewolf, librewolf

SVG <code>&lt;use&gt;</code> tags that referenced a same-origin document could have resulted in script execution if attacker input was sanitized via the HTML Sanitizer API

wireshark

In Wireshark 2

qt5-qtwebengine

Inappropriate implementation in Referrer in Google Chrome prior to 89

librewolf, librewolf, librewolf, librewolf, librewolf

Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it received a redirect header to an external protocol the browser would process the redirect and prom...

wireshark

In Wireshark 2

qt5-qtwebengine

Side-channel information leakage in Network Internals in Google Chrome prior to 89

librewolf, librewolf, librewolf, librewolf, librewolf

HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code>&lt;use&gt;</code> tags; however it incorrectly did not sanitize <code>xlink:href</code> attributes

wireshark

In Wireshark 2

qt5-qtwebengine

Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 89

thunderbird, thunderbird, librewolf, librewolf, librewolf, librewolf, librewolf

If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have been blocked, resulting in incorrect error pages being shown

wireshark

In Wireshark 2

qt5-qtwebengine

Incorrect security UI in TabStrip and Navigation in Google Chrome on Android prior to 89

librewolf, librewolf, librewolf, librewolf, librewolf

When downloading an update for an addon, the downloaded addon update's version was not verified to match the version selected from the manifest

wireshark

In Wireshark 2

qt5-qtwebengine

Out of bounds memory access in V8 in Google Chrome prior to 89

cracklib

Stack-based buffer overflow in the FascistGecosUser function in lib/fascist

mutt

Mutt before 1

wireshark

In Wireshark 2