Google - CVE CyberSecurity Database News (Page 26)

Dec 12, 2024 RCE Google Chrome

CVE-2024-12381 - Type Confusion in V8 Engines—How a Chrome Bug Opened the Door for Heap Attacks

In early June 2024, security researchers discovered a major vulnerability in the V8 JavaScript engine—used by Google Chrome and many Chromium-based browsers. Tracked as

Dec 9, 2024 WordPress Exploit Google

CVE-2023-47841 - How a "Missing Authorization" Flaw in Analytify (Up To 5.1.1) Opens the Door to Unauthorized Access

--- Introduction WordPress plugins bring features and convenience — but sometimes, new risks too. One such risk popped up in Analytify, a popular Google Analytics plugin,

Dec 9, 2024 WordPress API PHP Google

CVE-2023-32117 - Exploiting the Missing Authorization in SoftLab Integrate Google Drive (n/a - 1.1.99)

The digital world runs on cloud connectors, but sometimes, integration plugins forget to ask, “Are you allowed in?” That’s exactly what happened with CVE-2023-32117;

Dec 9, 2024 WordPress Exploit OAuth Google

CVE-2023-25455 - How a Missing Authorization Bug in miniOrange WordPress Social Login and Register Lets Attackers Exploit Your Site

If you’re using WordPress Social Login and Register (Discord, Google, Twitter, LinkedIn) by miniOrange, your website could be exposed to hackers. The vulnerability, known

Dec 6, 2024 Microsoft Exploit Google

CVE-2024-49041 - Unpacking the Microsoft Edge (Chromium-based) Spoofing Vulnerability

In June 2024, security researchers uncovered a significant vulnerability in Microsoft Edge (Chromium-based), identified as CVE-2024-49041. This vulnerability, labeled as a "Spoofing Vulnerability,"