Dawn vulnerabilities

A use-after-free vulnerability exists in the Dawn component of Google Chrome on Mac prior to version 150.0.7871.46. A remote attacker could exploit a crafted HTML page to potentially achieve a sandbox escape.

A vulnerability in the Dawn component of Google Chrome prior to 150.0.7871.46 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page. The issue is an out-of-bounds read and write.

A use-after-free vulnerability in Dawn in Google Chrome prior to 150.0.7871.46 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

An out-of-bounds read vulnerability in the Dawn component of Google Chrome prior to version 150.0.7871.46 could allow a remote attacker to potentially escape the sandbox via a crafted HTML page.

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A type confusion vulnerability in the Dawn component of Google Chrome prior to version 150.0.7871.47 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. This issue is rated as Critical in Chromium security.

A use-after-free vulnerability in Dawn in Google Chrome prior to 148.0.7778.216 allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

Uninitialized resource in Dawn in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Severity: Medium)

Insufficient validation of untrusted input in Dawn in Google Chrome on Android prior to 150.0.7871.46 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

An uninitialized use vulnerability in the Dawn component of Google Chrome on ChromeOS prior to version 150.0.7871.46 allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

An uninitialized use vulnerability in the Dawn component of Google Chrome prior to version 150.0.7871.46 allows a remote attacker to read potentially sensitive information from process memory via a crafted HTML page.

An uninitialized use vulnerability in the Dawn component in Google Chrome prior to version 150.0.7871.46 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

An inappropriate implementation in the Dawn component of Google Chrome prior to version 150.0.7871.47 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

An uninitialized use vulnerability in the Dawn component in Google Chrome prior to 150.0.7871.47 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

In Google Chrome on Mac, prior to version 148.0.7778.216, an out-of-bounds write vulnerability exists in the Dawn library. A remote attacker can exploit a crafted HTML page to perform an out-of-bounds memory write.

An out-of-bounds read vulnerability in the Dawn component of Google Chrome on Windows prior to version 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

An out-of-bounds read and write vulnerability in the Dawn component of Google Chrome on Android prior to version 148.0.7778.216 allows a remote attacker to potentially escape the browser sandbox via a crafted HTML page.