Threat database

An incorrect authorization vulnerability in the Autofill AI feature of Google Chrome prior to version 157.0.8103.38 allows a remote attacker to obtain cross-origin data by using a crafted HTML page. This issue has been fixed in version 157.0.8103.38.

Integer overflow in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

A UI misrepresentation vulnerability in Google Chrome prior to version 157.0.8103.38 allows a remote attacker to spoof UI elements via a crafted HTML page, potentially tricking users through social engineering. This issue has been fixed in version 157.0.8103.38.

Incorrect authorization in Proxy Auth in Google Chrome prior to 157.0.8103.38 allowed an adjacent attacker to obtain sensitive information via crafted network traffic. (Chromium security severity: Medium)

Incorrect reference resolution in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Information leak in Omnibox in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to leak sensitive information via UI Interaction. (Chromium security severity: Medium)

An incorrect authorization vulnerability in Google Chrome prior to version 157.0.8103.38 allows a remote attacker to bypass system access restrictions by using a crafted Chrome extension. This issue has been fixed in version 157.0.8103.38. The vulnerability is rated with medium severity by Chromium security.

An incorrect authorization vulnerability in Google Chrome Extensions prior to version 157.0.8103.38 allows a remote attacker to bypass system access restrictions by using a crafted Chrome extension. This issue has been fixed in version 157.0.8103.38. The vulnerability is rated with medium severity by Chromium security.

A UI misrepresentation vulnerability in the PageInfo feature of Google Chrome on iOS versions prior to 157.0.8103.38 allows a remote attacker to spoof UI elements using a crafted HTML page. This issue has been fixed in version 157.0.8103.38.

Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

An improper input validation vulnerability in the Shopping feature of Google Chrome prior to version 157.0.8103.38 allows a remote attacker to bypass system access restrictions to a privileged page via crafted network traffic. The issue is fixed in version 157.0.8103.38 and is rated with medium severity by Chromium security.

Use of released resource in GPU in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Incorrect authorization in Extensions in Google Chrome prior to 157.0.8103.38 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a crafted Chrome extension. (Chromium security severity: Medium)

A privilege elevation vulnerability exists in Google Chrome on iOS versions prior to 157.0.8103.38. This flaw allows a remote attacker to bypass system access restrictions and access privileged pages via a crafted HTML page. The issue has been fixed in version 157.0.8103.38.

Information leak in PrivateTokens in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

A missing authorization vulnerability in the Chromoting component of Google Chrome on Mac prior to version 157.0.8103.38 allows a local attacker to obtain sensitive information. The issue has been fixed in version 157.0.8103.38. The vulnerability is rated with medium severity by Chromium security.

Confused deputy in BackgroundFetch in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to potentially bypass web origin policy via a crafted HTML page. (Chromium security severity: Medium)

Incorrect authorization in CacheStorage in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Chromium security severity: Medium)

Missing authorization in PDF in Google Chrome prior to 157.0.8103.38 allowed a remote attacker to bypass web origin policy into a privileged page via a crafted Chrome extension. (Chromium security severity: Medium)

Incorrect authorization in API in Google Chrome prior to 157.0.8103.38 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions via a crafted HTML page. (Chromium security severity: Medium)