Fedoraproject

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-1823 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Inappropriate implementation in FedCM in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Low)
CVE-2023-1822 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Incorrect security UI in Navigation in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform domain spoofing via a crafted HTML page. (Chromium security severity: Low)
CVE-2023-1821 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Inappropriate implementation in WebShare in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: L...Show more Inappropriate implementation in WebShare in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially hide the contents of the Omnibox (URL bar) via a crafted HTML page. (Chromium security severity: Low)Show less
CVE-2023-1820 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTM...Show more Heap buffer overflow in Browser History in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)Show less
CVE-2023-1819 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Out of bounds read in Accessibility in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-1818 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Vulkan in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-1817 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Insufficient policy enforcement in Intents in Google Chrome on Android prior to 112.0.5615.49 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-1816 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Incorrect security UI in Picture In Picture in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to potentially perform navigation spoofing via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-1815 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page...Show more Use after free in Networking APIs in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)Show less
CVE-2023-1814 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Insufficient validation of untrusted input in Safe Browsing in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to bypass download checking via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-1813 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Ch...Show more Inappropriate implementation in Extensions in Google Chrome prior to 112.0.5615.49 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. (Chromium security severity: Medium)Show less
CVE-2023-1812 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Out of bounds memory access in DOM Bindings in Google Chrome prior to 112.0.5615.49 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)
CVE-2023-1811 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromi...Show more Use after free in Frames in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)Show less
CVE-2023-1810 3Debian FedoraprojectGoogle 3Chrome Debian LinuxFedora Jun 17, 2026 Apr 4, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium securit...Show more Heap buffer overflow in Visuals in Google Chrome prior to 112.0.5615.49 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)Show less
CVE-2023-26916 2Cesnet Fedoraproject 2Fedora Libyang Jun 17, 2026 Apr 3, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 libyang from v2.0.164 to v2.1.30 was discovered to contain a NULL pointer dereference via the function lys_parse_mem at lys_parse_mem.c.
CVE-2023-1611 2Fedoraproject Linux 2Fedora Linux Kernel Jun 17, 2026 Apr 3, 2023 N/A· v4 6.3 MEDIUM· v3 N/A· v2 A use-after-free flaw was found in btrfs_search_slot in fs/btrfs/ctree.c in btrfs in the Linux Kernel.This flaw allows an attacker to crash the system and possibly cause a kernel information lea
CVE-2022-36440 3Debian FedoraprojectFrrouting 3Debian Linux FedoraFrrouting Jun 17, 2026 Apr 3, 2023 N/A· v4 7.5 HIGH· v3 N/A· v2 A reachable assertion was found in Frrouting frr-bgpd 8.3.0 in the peek_for_as4_capability function. Attackers can maliciously construct BGP open packets and send them to BGP peers running frr-bgpd, resulting in DoS.
CVE-2023-29141 2Fedoraproject Mediawiki 2Fedora Mediawiki Jun 17, 2026 Mar 31, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An issue was discovered in MediaWiki before 1.35.10, 1.36.x through 1.38.x before 1.38.6, and 1.39.x before 1.39.3. An auto-block can occur for an untrusted X-Forwarded-For header.
CVE-2023-28756 3Debian FedoraprojectRuby Lang 4Debian Linux FedoraRuby+1 more Jun 17, 2026 Mar 31, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings t...Show more A ReDoS issue was discovered in the Time component through 0.2.1 in Ruby through 3.2.1. The Time parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to Time objects. The fixed versions are 0.1.1 and 0.2.2.Show less
CVE-2023-28755 3Debian FedoraprojectRuby Lang 3Debian Linux FedoraUri Jun 17, 2026 Mar 31, 2023 N/A· v4 5.3 MEDIUM· v3 N/A· v2 A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to...Show more A ReDoS issue was discovered in the URI component through 0.12.0 in Ruby through 3.2.1. The URI parser mishandles invalid URLs that have specific characters. It causes an increase in execution time for parsing strings to URI objects. The fixed versions are 0.12.1, 0.11.1, 0.10.2 and 0.10.0.1.Show less

Previous 1...424344...273 Next