Google Chrome vulnerabilities

In Google Chrome prior to version 148.0.7778.216, insufficient validation of untrusted input in Printing allows a remote attacker who compromised the renderer process to bypass site isolation via a crafted HTML page.

In Google Chrome prior to version 148.0.7778.216, insufficient input validation in the Input component allows a remote attacker who compromised the renderer process to bypass site isolation via a crafted HTML page.

A use-after-free vulnerability in Glic in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Insufficient validation of untrusted input in WebShare in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

Inappropriate implementation in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page. The vulnerability has a high severity rating according to Chromium.

A vulnerability in the GPU of Google Chrome prior to 148.0.7778.216 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is an out-of-bounds write.

An uninitialized use in Gamepad in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

An inappropriate implementation in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker, after convincing a user to perform specific UI gestures, to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page.

A Use-After-Free vulnerability in WebGL in Google Chrome prior to 148.0.7778.216 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

An integer overflow in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

An integer overflow in XML in Google Chrome on Windows prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A Use-After-Free vulnerability in the Bluetooth component of Google Chrome on Mac prior to version 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code via a crafted Chrome Extension. The issue is rated as High severity by the Chromium team.

An uninitialized use vulnerability in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker, after convincing a user to perform specific UI gestures, to execute arbitrary code inside a sandbox via a crafted HTML page.

A Use-After-Free vulnerability in the WebRTC component of Google Chrome prior to version 148.0.7778.216 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The issue has a high Chromium security severity.

A use-after-free vulnerability in SurfaceCapture in Google Chrome prior to 148.0.7778.216 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

A race condition in WebRTC in Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

A use-after-free vulnerability in the PDF component of Google Chrome prior to version 148.0.7778.216 allows a remote attacker to execute arbitrary code within a sandbox via a crafted PDF file.

A use-after-free vulnerability in the iOS component of Google Chrome on iOS prior to version 148.0.7778.216 allowed a remote attacker, after convincing a user to perform specific UI gestures, to execute arbitrary code via a crafted HTML page.

An inappropriate implementation in iOS in Google Chrome on iOS prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

A Use-After-Free vulnerability in the TabStrip component of Google Chrome prior to 148.0.7778.216 allowed a remote attacker, after convincing a user to perform specific UI gestures, to potentially exploit heap corruption via a crafted HTML page.

A Use-After-Free vulnerability in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The issue is rated as High severity.

A use-after-free vulnerability in the UI component of Google Chrome prior to version 148.0.7778.216 was discovered. A remote attacker could exploit a crafted HTML page to potentially perform a sandbox escape.

Insufficient validation of untrusted input in Google Chrome on iOS prior to 148.0.7778.216 allows a remote attacker who has compromised the renderer process to bypass same origin policy via a crafted HTML page. This vulnerability is rated as High severity by Chromium.

A Use-After-Free vulnerability in the Core component of Google Chrome on Windows, prior to version 148.0.7778.216, allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity.

A Use-After-Free vulnerability in the Views component of Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A Use-After-Free vulnerability in the XML component of Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. The issue is rated as High severity.

A use-after-free vulnerability in the Media component of Google Chrome on Windows prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

An out-of-bounds read vulnerability in WebGL in Google Chrome on Android prior to version 148.0.7778.216 allows a remote attacker to leak cross-origin data via a crafted HTML page.

A heap buffer overflow in WebCodecs in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Inappropriate implementation in V8 in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

A Use-After-Free vulnerability in the UI of Google Chrome on Windows prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A Use-After-Free vulnerability in the GFX component of Google Chrome on Mac prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A Use-After-Free vulnerability in the Aura component of Google Chrome prior to version 148.0.7778.216 allows a remote attacker to execute arbitrary code by convincing a user to perform specific UI gestures on a crafted HTML page.

A use-after-free vulnerability was found in the Input component of Google Chrome prior to version 148.0.7778.216. A remote attacker, after convincing a user to perform specific UI gestures, could potentially exploit heap corruption via a crafted HTML page.

A Use-After-Free vulnerability in the GPU component of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity in Chromium.

Inappropriate implementation in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page. The vulnerability has a high severity rating according to Chromium standards.

A Use-After-Free vulnerability in the GPU component of Google Chrome on Mac prior to version 148.0.7778.216 allows a remote attacker who has compromised the renderer process to execute arbitrary code via a crafted HTML page. The issue is rated as high severity.

An uninitialized use vulnerability in WebGL in Google Chrome on Android prior to version 148.0.7778.216 allows a remote attacker to leak cross-origin information via a crafted HTML page.

In Google Chrome on Android prior to version 148.0.7778.216, an uninitialized use in GPU was discovered. A remote attacker who had compromised the renderer process could leak cross-origin data via a crafted HTML page.

An out-of-bounds read vulnerability in WebGL in Google Chrome on Android prior to version 148.0.7778.216 allows a remote attacker to leak cross-origin data via a crafted HTML page.

An uninitialized use vulnerability in WebGL in Google Chrome on Android prior to 148.0.7778.216 allows a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

An inappropriate implementation in GPU in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. The issue is rated as High severity in Chromium.

An out-of-bounds write vulnerability in the GPU component of Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A Use-After-Free vulnerability in the Accessibility component of Google Chrome on Windows (prior to 148.0.7778.216) allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page. The issue is rated as High severity.

Insufficient validation of untrusted input in Site Isolation in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted MHTML page. (Chromium security severity: High)

A use-after-free vulnerability in the Accessibility component of Google Chrome prior to version 148.0.7778.216 allows a remote attacker who has compromised the renderer process to potentially escape the sandbox via a crafted HTML page.

Insufficient validation of untrusted input in the GPU component of Google Chrome on Android prior to version 148.0.7778.216 allows a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A use-after-free vulnerability in the DOM component of Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

A vulnerability in the GPU of Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is caused by an out-of-bounds read.

A Use-After-Free vulnerability in the GPU component of Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity.