Chromium: CVE-2022-0295 Use after free in Omnibox

Chromium: CVE-2022-0294 Inappropriate implementation in Push messaging

Chromium: CVE-2022-0293 Use after free in Web packaging

Chromium: CVE-2022-0292 Inappropriate implementation in Fenced Frames

Chromium: CVE-2022-0291 Inappropriate implementation in Storage

Chromium: CVE-2022-0290 Use after free in Site isolation

Chromium: CVE-2022-0289 Use after free in Safe browsing

A vulnerability was found in the Linux kernel's eBPF verifier when handling internal data structures. Internal memory locations could be returned to userspace. A local attacker with the permissions to insert eBPF code to the kernel can use this to leak internal kernel memory details defeating some of the exploit mitigations in place for the kernel. This flaws affects kernel versions < v5.16-rc6

Heap-based Buffer Overflow in vim/vim

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.

A heap-based buffer overflow flaw was found in the way the legacy_parse_param function in the Filesystem Context functionality of the Linux kernel verified the supplied parameters length. An unprivileged (in case of unprivileged user namespaces enabled otherwise needs namespaced CAP_SYS_ADMIN privilege) local user able to open a filesystem that does not support the Filesystem Context API (and thus fallbacks to legacy handling) could use this flaw to escalate their privileges on the system.

A flaw was found in the VirGL virtual OpenGL renderer (virglrenderer). The virgl did not properly initialize memory when allocating a host-backed memory resource. A malicious guest could use this flaw to mmap from the guest kernel and read this uninitialized memory from the host possibly leading to information disclosure.

Heap-based Buffer Overflow in vim/vim

Use After Free in vim/vim

An out-of-bounds write issue was found in the VirGL virtual OpenGL renderer (virglrenderer). This flaw allows a malicious guest to create a specially crafted virgil resource and then issue a VIRTGPU_EXECBUFFER ioctl leading to a denial of service or possible code execution.

Out-of-bounds Read in vim/vim

Chromium: CVE-2022-0120 Inappropriate implementation in Passwords

Chromium: CVE-2022-0118 Inappropriate implementation in WebShare