Google Chrome vulnerabilities

A heap buffer overflow in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

A Use-After-Free vulnerability in the UI of Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A Use-After-Free vulnerability in the GFX component of Google Chrome on Mac prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A Use-After-Free vulnerability in the Aura component of Google Chrome prior to version 148.0.7778.216 allows a remote attacker to execute arbitrary code by convincing a user to perform specific UI gestures on a crafted HTML page.

A use-after-free vulnerability was found in the Input component of Google Chrome prior to version 148.0.7778.216. A remote attacker, after convincing a user to perform specific UI gestures, could potentially exploit heap corruption via a crafted HTML page.

A Use-After-Free vulnerability in the GPU component of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity in Chromium.

Inappropriate implementation in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability has a high severity rating according to Chromium standards.

A Use-After-Free vulnerability in the GPU component of Google Chrome on Mac prior to version 148.0.7778.216 allows a remote attacker who has compromised the renderer process to execute arbitrary code via a crafted HTML page. The issue is rated as high severity.

An uninitialized use vulnerability in WebGL in Google Chrome on Android prior to version 148.0.7778.216 allows a remote attacker to leak cross-origin information via a crafted HTML page.

In Google Chrome on Android prior to version 148.0.7778.216, an uninitialized use in GPU was discovered. A remote attacker who had compromised the renderer process could leak cross-origin data via a crafted HTML page.

An out-of-bounds read vulnerability in WebGL in Google Chrome on Android prior to version 148.0.7778.216 allows a remote attacker to leak cross-origin data via a crafted HTML page.

An uninitialized use vulnerability in WebGL in Google Chrome on Android prior to 148.0.7778.216 allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

An inappropriate implementation in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. The issue is rated as High severity in Chromium.

An out-of-bounds write vulnerability in the GPU component of Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A Use-After-Free vulnerability in the Accessibility component of Google Chrome on Windows (prior to 148.0.7778.216) allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The issue is rated as High severity.

Insufficient validation of untrusted input in Site Isolation in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted MHTML page. (Chromium security severity: High)

A use-after-free vulnerability in the Accessibility component of Google Chrome prior to version 148.0.7778.216 allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page.

Insufficient validation of untrusted input in the GPU component of Google Chrome on Android prior to version 148.0.7778.216 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A use-after-free vulnerability in the DOM component of Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

A vulnerability in the GPU of Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is caused by an out-of-bounds read.

A Use-After-Free vulnerability in the GPU component of Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity.

A use-after-free vulnerability in XR in Google Chrome on Windows prior to 148.0.7778.216 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A Use-After-Free vulnerability in WebView in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue has a critical severity rating from Chromium.

A use-after-free vulnerability in the Proxy component of Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code via a crafted PAC script.

Insufficient validation of untrusted input in the UI in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A use-after-free vulnerability in the Browser component of Google Chrome on Mac prior to version 148.0.7778.216 allows a remote attacker to execute arbitrary code via a crafted HTML page.

A Use-After-Free vulnerability in the Base component of Google Chrome prior to version 148.0.7778.216 allows a remote attacker to execute arbitrary code via a crafted HTML page.

Insufficient validation of untrusted input in WebGL in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A use-after-free vulnerability in the Network component of Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Insufficient validation of untrusted input in the USB module in Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code via a crafted HTML page.

An out-of-bounds read vulnerability in Headless mode in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A use-after-free vulnerability in DOM in Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

An integer overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

A Use-After-Free vulnerability in the WebMIDI component of Google Chrome on Android prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue was rated as High severity in Chromium.

A use-after-free vulnerability in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity is High.

An inappropriate implementation in Input in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page.

An uninitialized use in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

A use-after-free vulnerability in the SVG component of Google Chrome prior to version 148.0.7778.216 allows a remote attacker to execute arbitrary code within a sandbox via a crafted HTML page.

A race condition in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

A use-after-free vulnerability in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who convinced a user to engage in specific UI gestures to execute arbitrary code via a crafted HTML page.

Insufficient validation of untrusted input in Passwords in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

A Use-After-Free vulnerability in the Views component of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker, after convincing a user to perform specific UI gestures, to execute arbitrary code via a crafted HTML page.

A Use-After-Free vulnerability in the PerformanceManager component of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity.

A Use-After-Free vulnerability in the Passwords component of Google Chrome on Windows prior to version 148.0.7778.216 was discovered. A remote attacker who had compromised the renderer process could potentially perform a sandbox escape via a crafted HTML page.

Use after free in DOM in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: Medium)

Google Chrome prior to version 148.0.7778.179 has insufficient validation of untrusted input in the Input component. A remote attacker who compromised the renderer process can leak cross-origin data via a crafted HTML page.

Heap buffer overflow in the Chromecast component of Google Chrome on Android, Linux, and ChromeOS prior to 148.0.7778.179 allows a local attacker to execute arbitrary code inside a sandbox via malicious network traffic. Severity is medium.

In Google Chrome on Mac prior to 148.0.7778.179, an out-of-bounds read in GPU allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium).

Out of bounds read in GPU in Google Chrome prior to 148.0.7778.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.