Threats affecting pkg:bitnami/gitlab

A use-after-free vulnerability exists in the ServiceWorker component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. The vulnerability is classified as critical by Chromium security.

An integer overflow vulnerability exists in the Skia component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser sandbox by delivering a crafted HTML page. The Chromium project rates the severity of this issue as High.

A use-after-free vulnerability exists in the Dawn component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker who has already compromised the renderer process to execute arbitrary code outside the browser sandbox by delivering a specially crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A vulnerability in ANGLE component of Google Chrome on Windows versions prior to 157.0.8103.78 allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. This issue is classified with high severity by Chromium security.

A missing authorization vulnerability in the ImageCapture component of Google Chrome versions prior to 157.0.8103.78 allows a remote attacker who has compromised the renderer process to bypass the web origin policy using a crafted HTML page. This vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability exists in the Frames component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the Media component of Google Chrome on Android versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the sandbox by convincing a user to visit a crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A vulnerability in ANGLE component of Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to read memory outside the sandbox by using a crafted HTML page. This issue is classified with high severity by Chromium security.

An incorrect authorization vulnerability exists in the FileSystem component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker, through social engineering, to potentially execute arbitrary code outside the browser sandbox by crafting a malicious HTML page. The vulnerability is rated with high severity by Chromium security.

A use-after-free vulnerability exists in the DOM component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is classified with high severity by Chromium security.

An out-of-bounds read vulnerability exists in the Skia component of Google Chrome on Mac systems prior to version 157.0.8103.78. This flaw allows a remote attacker to read memory outside the sandbox by delivering a crafted HTML page. The Chromium project has assigned this issue a high security severity rating.

An incorrect authorization vulnerability in the FileSystem component of Google Chrome versions prior to 157.0.8103.78 allows a remote attacker to execute arbitrary code outside the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A vulnerability in Google Chrome prior to version 157.0.8103.78 allows a remote attacker to execute arbitrary code outside the sandbox by leveraging social engineering and a crafted HTML page. This issue involves link following in the FileSystem component and is rated with high severity by Chromium security.

A use-after-free vulnerability exists in the Extensions component of Google Chrome on Windows versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code outside the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has been assigned a high severity by Chromium security.

A type confusion vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 157.0.8103.78. This flaw could allow a remote attacker to execute arbitrary code within the browser's sandbox by tricking the engine with a specially crafted HTML page. The issue has been classified with high security severity by Chromium.

A vulnerability in Google Chrome prior to version 157.0.8103.78 involves incomplete cleanup in the browser cache. This flaw allows a remote attacker to obtain cross-origin data by leveraging a crafted HTML page. The issue is classified with high security severity by the Chromium project.

A use-after-free vulnerability exists in the V8 JavaScript engine of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The issue is classified with high severity by Chromium security.

A type confusion vulnerability exists in the V8 JavaScript engine used by Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by delivering a crafted HTML page. The vulnerability has been assigned a high severity rating by the Chromium security team.

An out of bounds read vulnerability exists in the Skia component of Google Chrome versions prior to 157.0.8103.78. This flaw allows a remote attacker to obtain cross-origin data by crafting a malicious HTML page. The vulnerability is rated with high severity by the Chromium security team.

An improper input validation vulnerability in the Core component of Google Chrome on Android versions prior to 157.0.8103.78 allows a local attacker to bypass the web origin policy via a co-installed app. This vulnerability has been assigned a high security severity by Chromium. No CVSS score or patch information is currently provided.