Threats affecting pkg:rpm/google/chrome

An out of bounds read vulnerability exists in the FileSystem component of Google Chrome prior to version 156.0.8078.79. This flaw could allow a remote attacker to read memory inside the sandbox by delivering a crafted HTML page. The issue has been fixed in Chrome version 156.0.8078.79.

A use-after-free vulnerability exists in the Skia component of Google Chrome prior to version 156.0.8078.79. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The issue has been fixed in Chrome version 156.0.8078.79.

A use-after-free vulnerability in the Blink component of Google Chrome prior to version 156.0.8078.79 allows remote attackers to execute arbitrary code inside the sandbox via a crafted HTML page. This vulnerability has been fixed in version 156.0.8078.79.

A memory corruption vulnerability in the DOM component of Google Chrome prior to version 156.0.8078.79 allows a remote attacker to potentially execute arbitrary code within the sandbox by delivering a crafted HTML page. This vulnerability has been fixed in version 156.0.8078.79.

A use-after-free vulnerability in the FileSystem component of Google Chrome prior to version 156.0.8078.79 allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. This vulnerability has been assigned high severity by Chromium security. The issue is fixed in Chrome version 156.0.8078.79.

A memory corruption vulnerability in the Autofill component of Google Chrome prior to version 156.0.8078.79 allows remote attackers to execute arbitrary code within the sandbox via a crafted HTML page. This issue has been fixed in version 156.0.8078.79.

A critical memory corruption vulnerability exists in the MediaStream component of Google Chrome prior to version 156.0.8078.79. This flaw could allow a remote attacker to potentially read memory inside the sandbox by crafting a malicious HTML page. The issue was fixed in Chrome version 156.0.8078.79.

A use-after-free vulnerability exists in the FileSystem component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code within the sandbox by tricking a user into visiting a crafted HTML page. The issue has been fixed in version 156.0.8078.73.

A vulnerability in Google Chrome prior to version 156.0.8078.73 involves improper input validation in the Command component. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by delivering a crafted HTML page. The issue has been fixed in version 156.0.8078.73.

A use-after-free vulnerability exists in the Modularization component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the browser's sandbox by crafting a malicious HTML page. The issue has been fixed in version 156.0.8078.73.

An improper access control vulnerability in the Forms component of Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to bypass the web origin policy via a crafted HTML page. This issue has been fixed in version 156.0.8078.73.

A memory corruption vulnerability in the Payments component of Google Chrome versions prior to 156.0.8078.73 allows remote attackers to execute arbitrary code inside the sandbox via a crafted HTML page. This issue has been fixed in version 156.0.8078.73.

An input validation vulnerability in the ReadingList feature of Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to potentially execute arbitrary code within the sandbox by delivering a crafted HTML page. This issue has been fixed in version 156.0.8078.73.

An out-of-bounds write vulnerability exists in the editing component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to execute arbitrary code outside the browser sandbox by tricking a user into visiting a crafted HTML page. The issue has been fixed in version 156.0.8078.73.

An improper input validation vulnerability in the Headless component of Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to potentially execute arbitrary code inside the sandbox by delivering a crafted HTML page. This vulnerability has been fixed in version 156.0.8078.73.

A use-after-free vulnerability exists in the FileSystem component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the sandbox by delivering a crafted HTML page. The vulnerability has been fixed in version 156.0.8078.73.

A use-after-free vulnerability exists in the ImageCapture component of Google Chrome versions prior to 156.0.8078.73. This flaw allows a remote attacker to execute arbitrary code within the sandbox by crafting a malicious HTML page. The issue has been fixed in version 156.0.8078.73.

A memory corruption vulnerability exists in the ANGLE component of Google Chrome versions prior to 156.0.8078.73. This flaw could allow a remote attacker to potentially read memory inside the sandbox by crafting a malicious HTML page. The issue has been fixed in version 156.0.8078.73.

A vulnerability in WebRTC within Google Chrome versions prior to 156.0.8078.73 allows a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. This issue is due to improper input validation.

A vulnerability in the Compositing component of Google Chrome before version 156.0.8078.73 allows remote attackers to potentially execute arbitrary code outside the sandbox by using a crafted HTML page. This issue is due to improper input validation.