Search: 20.chromium

An improper access control vulnerability in the V8 engine of Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to read memory by delivering a crafted HTML page. This issue has been assigned a high severity by the Chromium security team.

An improper input validation vulnerability in the V8 JavaScript engine used by Google Chrome versions prior to 156.0.8078.73 could allow a remote attacker to execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. This vulnerability has been assigned a high severity by the Chromium security team.

A use-after-free vulnerability exists in the Video component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The vulnerability is rated with high severity by Chromium security.

A memory corruption vulnerability in the Media component of Google Chrome versions prior to 156.0.8078.73 could allow a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The issue is classified with high severity by Chromium security.

A vulnerability in Google Chrome on Android prior to version 156.0.8078.73 involves improper input validation in the Core component. This flaw could allow a remote attacker to execute arbitrary code outside the sandbox by delivering a crafted HTML page. The issue is classified with high severity by Chromium security.

A missing authorization vulnerability in the Video component of Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to bypass the web origin policy by using a crafted HTML page. This flaw has been assigned a high severity by Chromium security.

A vulnerability in Google Chrome on Windows prior to version 156.0.8078.73 involves improper input validation in Views. This flaw could allow a remote attacker to execute arbitrary code outside the sandbox by delivering a crafted HTML page. The issue is classified with high security severity by the Chromium project.

A memory corruption vulnerability exists in the Turbolev component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to potentially execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is classified with high severity by Chromium security.

A use-after-free vulnerability exists in the SVG component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by convincing a user to visit a crafted HTML page. The vulnerability is rated with high severity by Chromium security.

A memory corruption vulnerability exists in the FileSystem component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The issue is classified as critical by Chromium security.

A type confusion vulnerability in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code remotely over a network. This flaw involves accessing a resource using an incompatible type, leading to potential arbitrary code execution. The vulnerability has a high severity rating with a CVSS score of 7.5. No affected versions or patch information are currently provided.

Multiple security vulnerabilities have been identified and fixed in the ANGLE component used by the WebKitGTK port for the GTK platform. These include use-after-free, out-of-bounds read and write, buffer overflow, type confusion, and uninitialized resource issues. The vulnerabilities affect the chromium-browser's ANGLE library and have been addressed in a security update for Red Hat Enterprise Linux 9. The update is rated as Important by Red Hat Product Security.

Use after free in Animation in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Memory corruption in Paint in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Memory corruption in Skia in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Improper input validation in UI in Google Chrome on on Android prior to 156.0.8078.73 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in WTF in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)