Threat database

Improper input validation in Performance in Google Chrome prior to 157.0.8103.38 allowed a local attacker to potentially execute arbitrary code inside the sandbox via a local program. (Chromium security severity: Low)

A missing authorization vulnerability in Google Chrome's DevTools prior to version 157.0.8103.38 allows a remote attacker to bypass the web origin policy via a crafted Chrome extension leveraging social engineering. The issue has been fixed in version 157.0.8103.38. The Chromium security team rates this vulnerability as low severity.

Use after free in Track in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

An incorrect authorization vulnerability in the Network component of Google Chrome prior to version 157.0.8103.38 allows a remote attacker to bypass the web origin policy by using a crafted Chrome extension and social engineering techniques. The issue has been fixed in version 157.0.8103.38. The Chromium security team rates this vulnerability as low severity.

An incorrect authorization vulnerability in the core of Google Chrome prior to version 157.0.8103.38 allows a local attacker, using social engineering and a co-installed app, to obtain sensitive information. The issue has been fixed in version 157.0.8103.38. The Chromium security team rates this vulnerability as low severity.

Missing authorization in Input in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

Out of bounds read in Animation in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Race condition in ANGLE in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Low)

Use after free in Network in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: Low)

Uncontrolled recursion in SVG in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Low)

An improper resource exposure vulnerability in the ORB component of Google Chrome prior to version 157.0.8103.38 allows a remote attacker to bypass site isolation by using a crafted HTML page. The issue has been fixed in version 157.0.8103.38. The Chromium security team rates the severity of this vulnerability as low.

Improper state validation in XML in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)

Incorrect authorization in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: Low)

UI misrepresentation in Browser in Google Chrome on on Mac prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to spoof UI elements via a crafted HTML page. (Chromium security severity: Low)

A UI misrepresentation vulnerability in Google Chrome notifications on Windows prior to version 157.0.8103.38 allows a remote attacker to spoof UI elements via a crafted HTML page, potentially enabling social engineering attacks. The issue has been fixed in version 157.0.8103.38. The vulnerability is rated with low severity by Chromium security.

An incorrect authorization vulnerability in Google Chrome prior to version 157.0.8103.38 allows a remote attacker to bypass system access restrictions via a crafted HTML page leveraging social engineering. The issue affects the Permissions component and has been assigned a low severity by Chromium security.

A confused deputy vulnerability in the WebUI component of Google Chrome prior to version 157.0.8103.38 allows a remote attacker to bypass the web origin policy via a crafted HTML page leveraging social engineering. The issue has been fixed in Chrome version 157.0.8103.38. The vulnerability is rated as low severity by Chromium security.

An improper input validation vulnerability in the Variations component of Google Chrome prior to version 157.0.8103.38 allows a remote attacker to bypass system access restrictions via crafted network traffic. The issue is rated with low severity by Chromium security.

UI misrepresentation in Passwords in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to obtain sensitive information via crafted network traffic. (Chromium security severity: Low)

Race condition in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: Low)