oxide project oxide vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

A malicious webview could install long-lived unload handlers that re-use an incognito BrowserContext that is queued for destruction in versions of Oxide prior to 1.18.3.

Oxide Project Oxide

8.8

CVSSv3

The oxide::JavaScriptDialogManager function in oxide-qt prior to 1.9.1 as packaged in Ubuntu 15.04 and Ubuntu 14.04 allows remote malicious users to cause a denial of service (application crash) or execute arbitrary code via a crafted website.

Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 14.04 Oxide Project Oxide

9.8

CVSSv3

Use-after-free vulnerability in Oxide allows remote malicious users to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors, related to responding synchronously to permission requests.

Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 15.10 Canonical Ubuntu Linux 14.04 Oxide Project Oxide -

NA

Use-after-free vulnerability in the file picker implementation in Oxide prior to 1.6.5 allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code via a crafted webpage.

Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 15.1 Oxide Project Oxide

NA

Use-after-free vulnerability in Oxide prior to 1.5.6 and 1.6.x prior to 1.6.1 allows remote malicious users to cause a denial of service (crash) or possibly execute arbitrary code by deleting all WebContents while a RenderProcessHost instance still exists.

Canonical Ubuntu Linux 14.10 Canonical Ubuntu Linux 14.04 Oxide Project Oxide 1.6.0 Oxide Project Oxide

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook