Search: 20.chromium

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

Use after free in Microsoft Edge (Chromium-based) allows an authorized attacker to elevate privileges over a network.

Incorrect authorization in Microsoft Edge for Android allows an unauthorized attacker to bypass a security feature over a network.

Access of resource using incompatible type ('type confusion') in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Use after free in Microsoft Edge for iOS allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Double free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

This security update for Chromium addresses multiple vulnerabilities including memory corruption, use-after-free, improper input validation, improper access control, missing authorization, and out-of-bounds write issues across various components such as FileSystem, FileAPI, Skia, V8, Turbolev, Animation, HTML, ANGLE, Cache, WebRTC, Video, Headless, WebAudio, Payments, Media, ImageCapture, Compositing, PDFium, SVG, Views, Metrics, UI, Modularization, Browser, and WTF. These vulnerabilities could potentially lead to security risks if left unpatched.

Insufficient policy enforcement in chrome-devtools-mcp in Google Chrome on Linux prior to 1.5.0 allowed a local attacker to perform arbitrary read/write via a malicious file. (Chromium security severity: Medium)

Highcharts JS is a JavaScript charting library based on SVG. From 12.0.0 until 12.6.1 and 13.1.0, Highcharts falls back to assigning raw markup to innerHTML when DOMParser cannot return a document, before its allow-list is applied. In Chromium, the Trusted Types callback can throw while a beforeprint handler runs, so a page that redraws a chart during beforeprint can insert untrusted HTML text options into the hosting document. Event handlers in that markup then run in the page origin when printing begins. The issue affects HTML-rendered titles, labels, data labels, responsive text, and the Stock, Maps, and Gantt products shipped in the same package. This issue is fixed in 12.6.1 and 13.1.0.

Multiple security vulnerabilities have been identified and fixed in the WebKitGTK port of the WebKit rendering engine for the GTK platform. These include use-after-free, out-of-bounds read and write, buffer overflow, type confusion, and uninitialized resource issues in the ANGLE component used by chromium-browser. The vulnerabilities affect Red Hat Enterprise Linux 8 across various architectures. Red Hat has released an important security update to address these issues.

Red Hat has issued a critical security advisory for webkitgtk4, addressing multiple vulnerabilities in the ANGLE component used by the chromium-browser within WebKitGTK+. These vulnerabilities include out-of-bounds memory access, heap buffer overflows, use-after-free, integer overflows, type confusion, and insufficient validation of untrusted input. The advisory covers a wide range of CVEs spanning from 2024 to 2026. The update is targeted for Red Hat Enterprise Linux 7 Extended Lifecycle Support. No specific affected versions are detailed in the advisory.

This security update for Chromium addresses numerous critical vulnerabilities including multiple use-after-free bugs, memory corruption, buffer overflows, improper input validation, missing or incorrect authorization, information leaks, race conditions, and type confusion issues across various components such as V8, DOM, SVG, Media, ANGLE, Browser, PDF, and others. These vulnerabilities could potentially allow attackers to execute arbitrary code, escalate privileges, or cause denial of service. The update includes fixes in Chromium versions 155.0.8059.39, 155.0.8059.79, and 155.0.8059.84.

This security update for Chromium addresses numerous vulnerabilities across multiple versions, including out-of-bounds writes, use-after-free, integer overflows, type confusion, buffer overflows, information leaks, improper authorization, UI misrepresentations, and other memory safety issues. The update fixes these issues in Chromium versions 154.0.8037.57, 154.0.8037.92, and 154.0.8037.97. These vulnerabilities affect various components such as WebGL, V8 JavaScript engine, GPU, ANGLE, WebRTC, SVG, MediaStream, and others.