Threats affecting pkg:bitnami/gitlab

A buffer overflow vulnerability exists in the Skia component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A vulnerability in the V8 JavaScript engine used by Google Chrome prior to version 157.0.8103.78 allows a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. The issue is due to incomplete cleanup in V8. The Chromium security team rates this vulnerability as High severity.

A use-after-free vulnerability exists in the Compositing component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox by delivering a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A memory corruption vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 157.0.8103.78. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by delivering a specially crafted HTML page. The issue is classified with high severity by Chromium security.

A use-after-free vulnerability in the PDF component of Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability is classified with high severity by Chromium security.

A race condition vulnerability exists in the Extensions component of Google Chrome on Mac systems prior to version 157.0.8103.78. This flaw allows a remote attacker who has already compromised the renderer process to obtain sensitive information by leveraging crafted network traffic. The vulnerability is classified with high severity by Chromium security.

A vulnerability in Google Chrome on Mac prior to version 157.0.8103.78 allows a remote attacker who has compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. This issue is due to incorrect reference resolution in the browser component.

A vulnerability in the Skia graphics library used by Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to obtain cross-origin data by leveraging an uninitialized resource. This issue is classified with high severity by the Chromium security team.

A type confusion vulnerability in the V8 JavaScript engine of Google Chrome versions prior to 157.0.8103.78 allows remote attackers to execute arbitrary code within the browser sandbox via a crafted HTML page. The vulnerability is rated with high severity by the Chromium security team.

An out-of-bounds read vulnerability exists in the Compositing component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker who has already compromised the renderer process to read memory outside the sandbox by using a crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A use of uninitialized variable vulnerability exists in the Skia component of Google Chrome on Android versions prior to 157.0.8103.78. This flaw allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability in the CSS component of Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability in the CSS component of Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability is classified as critical by Chromium security.

A type confusion vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 157.0.8103.78. This flaw could allow a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The vulnerability is rated with high severity by the Chromium security team.

A vulnerability in the ANGLE component of Google Chrome on Windows versions prior to 157.0.8103.78 allows a remote attacker to bypass the web origin policy by using a crafted HTML page. This flaw is classified with high severity by Chromium security.

A vulnerability in the Skia component of Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to obtain cross-origin data by leveraging an uninitialized resource. This issue is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the Elements component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by tricking a user into visiting a specially crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability exists in the Accessibility component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is classified as critical by Chromium security.

An integer overflow vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by delivering a specially crafted HTML page. The Chromium project has assigned this vulnerability a high security severity rating.

A use-after-free vulnerability exists in the Animation component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is classified with high severity by Chromium security.