Threats affecting pkg:deb/google/chrome

Out of bounds read in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Use after free in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Blink in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in DOM in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in FileSystem in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in Autofill in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in MediaStream in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

A use-after-free vulnerability exists in the FileSystem component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by tricking a user into visiting a crafted HTML page. The issue has been fixed in version 156.0.8078.73.

A vulnerability in Google Chrome prior to version 156.0.8078.73 involves improper input validation in the Command component. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. The issue has been fixed in version 156.0.8078.73.

A use-after-free vulnerability exists in the Modularization component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by crafting a malicious HTML page. The issue has been fixed in version 156.0.8078.73.

An improper access control vulnerability in the Forms component of Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to bypass the web origin policy via a crafted HTML page. This issue has been fixed in version 156.0.8078.73.

A memory corruption vulnerability in the Payments component of Google Chrome versions prior to 156.0.8078.73 allows remote attackers to execute arbitrary code inside the sandbox via a crafted HTML page. This issue has been fixed in version 156.0.8078.73.

An input validation vulnerability in the ReadingList feature of Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to potentially execute arbitrary code within the sandbox by delivering a crafted HTML page. This issue has been fixed in version 156.0.8078.73.

An out-of-bounds write vulnerability exists in the editing component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The issue has been fixed in version 156.0.8078.73.

An improper input validation vulnerability in the Headless component of Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to potentially execute arbitrary code inside the sandbox by delivering a crafted HTML page. This vulnerability has been fixed in version 156.0.8078.73.

A use-after-free vulnerability exists in the FileSystem component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability has been fixed in version 156.0.8078.73.

A use-after-free vulnerability exists in the ImageCapture component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The issue has been fixed in version 156.0.8078.73.

A memory corruption vulnerability exists in the ANGLE component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to potentially read memory inside the sandbox by crafting a malicious HTML page. The issue has been fixed in version 156.0.8078.73.

A vulnerability in WebRTC within Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. This issue is due to improper input validation.

A vulnerability in the Compositing component of Google Chrome before version 156.0.8078.73 allows remote attackers to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. This issue is due to improper input validation.