Vulnerabilities > High

DATE CVE VULNERABILITY TITLE RISK
2024-10-15 CVE-2024-9956 Unspecified vulnerability in Google Chrome
Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation via a crafted HTML page.
local
low complexity
google
7.8
2024-10-15 CVE-2024-9957 Use After Free vulnerability in Google Chrome
Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2024-10-15 CVE-2024-9959 Use After Free vulnerability in Google Chrome
Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted Chrome Extension.
network
low complexity
google CWE-416
8.8
2024-10-15 CVE-2024-9960 Use After Free vulnerability in Google Chrome
Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
network
high complexity
google CWE-416
7.5
2024-10-15 CVE-2024-9961 Use After Free vulnerability in Google Chrome
Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page.
network
low complexity
google CWE-416
8.8
2024-10-15 CVE-2024-9965 Unspecified vulnerability in Google Chrome
Insufficient data validation in DevTools in Google Chrome on Windows prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page.
network
low complexity
google
8.8
2024-10-15 CVE-2024-21190 Unspecified vulnerability in Oracle Fusion Middleware 12.2.1.4.0
Vulnerability in the Oracle Global Lifecycle Management FMW Installer product of Oracle Fusion Middleware (component: Cloning).
network
low complexity
oracle
7.5
2024-10-15 CVE-2024-21191 Unspecified vulnerability in Oracle Fusion Middleware 12.2.1.4.0
Vulnerability in the Oracle Enterprise Manager Fusion Middleware Control product of Oracle Fusion Middleware (component: FMW Control Plugin).
network
low complexity
oracle
7.6
2024-10-15 CVE-2024-21195 Unspecified vulnerability in Oracle BI Publisher 12.2.1.4.0/7.0.0.0.0/7.6.0.0.0
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Layout Templates).
network
low complexity
oracle
7.6
2024-10-15 CVE-2024-21214 Unspecified vulnerability in Oracle Peoplesoft Enterprise Peopletools 8.59/8.60/8.61
Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Query).
network
low complexity
oracle
8.1