Threats affecting pkg:generic/hunspell

A vulnerability in Google Chrome on Mac prior to version 156.0.8078.73 involves improper input validation in the Metrics component. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The issue is classified with high security severity by the Chromium project.

An improper access control vulnerability in the V8 engine of Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to read memory by delivering a crafted HTML page. This issue has been assigned a high severity by the Chromium security team.

An improper input validation vulnerability in the V8 JavaScript engine used by Google Chrome versions prior to 156.0.8078.73 could allow a remote attacker to execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. This vulnerability has been assigned a high severity by the Chromium security team.

A critical vulnerability in the FileAPI component of Google Chrome prior to version 156.0.8078.73 allows remote attackers to potentially execute arbitrary code within the browser sandbox via a crafted HTML page.

A memory corruption vulnerability in the Skia component of Google Chrome prior to version 156.0.8078.73 could allow a remote attacker to potentially read memory inside the sandbox by using a crafted HTML page. The issue is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the Video component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is rated with high severity by Chromium security.

A memory corruption vulnerability in the Media component of Google Chrome versions prior to 156.0.8078.73 could allow a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The issue is classified with high severity by Chromium security.

A vulnerability in Google Chrome on Android prior to version 156.0.8078.73 involves improper input validation in the Core component. This flaw could allow a remote attacker to execute arbitrary code outside the sandbox by delivering a crafted HTML page. The issue is classified with high severity by Chromium security.

Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Chromium security severity: High)

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Improper input validation in Views in Google Chrome on on Windows prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in Turbolev in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in FileSystem in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

A vulnerability has been found in a2aproject a2a-js up to 1.1.0. Impacted is the function ResultManager.applyStatusUpdate of the file src/server/result_manager.ts of the component Task Status Update Handler. Such manipulation leads to race condition. The attack may be launched remotely. Upgrading to version 1.2.0 is recommended to address this issue. The name of the patch is 7b87c9480bfa643f9d2b2eaf06988b3d3a95de25. It is recommended to upgrade the affected component.

Memory corruption in Media in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Improper input validation in SVG in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)