Threat database

A use-after-free vulnerability exists in the Animation component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by tricking a user into visiting a specially crafted HTML page. The vulnerability is rated as high severity by Chromium security.

A use-after-free vulnerability exists in the WTF component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is classified with high severity by Chromium security.

An improper input validation vulnerability in the Skia component of Google Chrome versions prior to 156.0.8078.73 could allow a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The issue is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the ImageCapture component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The issue has been fixed in version 156.0.8078.73.

A memory corruption vulnerability exists in the ANGLE component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to potentially read memory inside the sandbox by crafting a malicious HTML page. The issue has been fixed in version 156.0.8078.73.

A vulnerability in WebRTC within Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. This issue is due to improper input validation.

A vulnerability in the Compositing component of Google Chrome before version 156.0.8078.73 allows remote attackers to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. This issue is due to improper input validation.

A memory corruption vulnerability exists in the HTML component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by delivering a specially crafted HTML page. The issue has been fixed in version 156.0.8078.73.

A memory corruption vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code within the browser's sandbox by delivering a specially crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability exists in the Browser component of Google Chrome on Windows versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code inside the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A vulnerability in ANGLE component of Google Chrome on Mac prior to version 156.0.8078.73 allows remote attackers to potentially execute arbitrary code inside the sandbox via crafted HTML pages. The issue is due to improper input validation.

A vulnerability in Google Chrome on Mac prior to version 156.0.8078.73 involves improper input validation in the Metrics component. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The issue is classified with high security severity by the Chromium project.

An improper access control vulnerability in the V8 engine of Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to read memory by delivering a crafted HTML page. This issue has been assigned a high severity by the Chromium security team.

Improper input validation in V8 in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Improper input validation in FileAPI in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Improper input validation in Core in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)