Threat Intelligence Database

Out of bounds write in Codecs in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Use after free in WebMCP in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Blink in Google Chrome prior to 150.0.7871.186 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Input in Google Chrome prior to 150.0.7871.186 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

A use-after-free vulnerability exists in the Ozone component of Google Chrome on Linux versions prior to 150.0.7871.128. This flaw allows a remote attacker to potentially exploit heap corruption by convincing a user to perform specific UI gestures on a crafted HTML page. The vulnerability has been assigned a high severity rating by Chromium security.

A use-after-free vulnerability exists in the GPU component of Google Chrome on Android versions prior to 150.0.7871.128. This flaw could allow a remote attacker to potentially escape the browser sandbox by convincing a user to visit a crafted HTML page. The vulnerability is classified as critical due to its potential to compromise confidentiality, integrity, and availability.

A use-after-free vulnerability exists in the Cast component of Google Chrome versions prior to 150.0.7871.128. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability is classified as critical due to its potential to compromise confidentiality, integrity, and availability.

A use-after-free vulnerability exists in the CameraCapture component of Google Chrome on Mac systems prior to version 150.0.7871.128. This flaw could allow a remote attacker to potentially escape the browser's sandbox by tricking a user into visiting a crafted HTML page. The vulnerability is classified as critical due to its potential to compromise confidentiality, integrity, and availability.

A use-after-free vulnerability exists in the Network component of Google Chrome versions prior to 150.0.7871.128. This flaw allows a remote attacker to potentially exploit heap corruption by crafting a malicious HTML page. The vulnerability is classified as critical due to its potential impact on confidentiality, integrity, and availability.

Use after free in GPU in Google Chrome on Android prior to 150.0.7871.182 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)