Critical severity threats

StorageGRID (formerly StorageGRID Webscale) versions 11.3 and higher allow an attacker with product-specific knowledge and the ability to communicate with the Grid Network on certain ports to make unauthorized requests.

Dell Wyse Management Suite versions prior to 2609.0.0.155 contain a critical cross-site scripting (XSS) vulnerability. This flaw allows a low privileged attacker with remote access to inject malicious scripts during web page generation. Successful exploitation can lead to complete compromise of confidentiality, integrity, and availability of the affected system.

A use-after-free vulnerability exists in the Extensions component of Google Chrome versions prior to 157.0.8103.38. This flaw could allow a remote attacker, using social engineering techniques, to execute arbitrary code outside the browser sandbox by delivering a specially crafted Chrome extension. The vulnerability is classified with high severity by Chromium security.

A buffer overflow vulnerability exists in the Dawn component of Google Chrome on Android versions prior to 157.0.8103.38. This flaw allows a remote attacker to potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. The vulnerability is classified as critical by Chromium security.

A buffer overflow vulnerability exists in ANGLE component of Google Chrome versions prior to 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by delivering a specially crafted HTML page. The Chromium project has rated the severity of this issue as High.

A use-after-free vulnerability exists in the WebGL component of Google Chrome on Android versions prior to 157.0.8103.38. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by convincing a user to visit a crafted HTML page. The vulnerability is classified as critical by Chromium security.

A use-after-free vulnerability exists in the TabStrip component of Google Chrome versions prior to 157.0.8103.38. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by exploiting a crafted Chrome extension. The vulnerability is classified with medium severity by Chromium security.

A privilege elevation vulnerability exists in the Contacts component of Google Chrome on Android versions prior to 157.0.8103.38. This flaw could allow a remote attacker to execute arbitrary code outside the sandbox by delivering a crafted HTML page. The vulnerability is rated with medium severity by Chromium security.

A critical memory corruption vulnerability exists in ANGLE within Google Chrome on Android versions prior to 157.0.8103.38. This flaw allows a remote attacker to potentially execute arbitrary code outside the browser sandbox by delivering a crafted HTML page.

A use-after-free vulnerability exists in the Navigation component of Google Chrome on Android versions prior to 157.0.8103.38. This flaw allows a remote attacker to potentially execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is rated critical with a high CVSS score of 9.6.

A use-after-free vulnerability exists in the Autofill component of Google Chrome versions prior to 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code outside the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high severity rating with a CVSS score of 9.6.

A use-after-free vulnerability in the Passwords component of Google Chrome versions prior to 157.0.8103.38 allows a remote attacker to potentially execute arbitrary code outside the sandbox by delivering a crafted HTML page. This vulnerability is rated critical with a CVSS score of 9.6.

A vulnerability in Google Chrome DevTools prior to version 157.0.8103.38 allows a remote attacker to potentially execute arbitrary code outside the sandbox by tricking a user into visiting a crafted HTML page. This issue stems from incorrect reference resolution in DevTools and is rated critical with a high CVSS score.

A use-after-free vulnerability exists in the browser component of Google Chrome versions prior to 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code outside the sandbox by convincing a user to visit a specially crafted HTML page. The vulnerability has a critical severity rating with a CVSS score of 9.6.

A use-after-free vulnerability exists in the PictureInPicture feature of Google Chrome versions prior to 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code outside the sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a high severity rating and a CVSS score of 9.6, indicating critical impact on confidentiality, integrity, and availability.

A buffer overflow vulnerability exists in the Dawn component of Google Chrome versions prior to 157.0.8103.38. This flaw allows a remote attacker to potentially execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. The vulnerability is rated critical with a high CVSS score of 9.6.

A use-after-free vulnerability exists in the ANGLE component of Google Chrome versions prior to 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is rated critical with a high CVSS score of 9.6.

A use-after-free vulnerability exists in the Core component of Google Chrome versions prior to 157.0.8103.38. This flaw allows a remote attacker to potentially execute arbitrary code outside the browser's sandbox by tricking a user into visiting a crafted HTML page. The vulnerability has a critical severity rating with a high CVSS score of 9.6.

A use-after-free vulnerability exists in the mobile version of Google Chrome prior to 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code outside the sandbox by leveraging social engineering and a crafted Chrome extension. The vulnerability is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the TabStrip component of Google Chrome versions prior to 157.0.8103.38. This flaw allows a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is rated critical with a high CVSS score of 9.6.