Google Chrome vulnerabilities

Incorrect security UI in SplitView in Google Chrome prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted domain name.

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to leak cross-origin data via a crafted Chrome Extension. (Chromium security severity: Low)

Incorrect security UI in Fullscreen UI in Google Chrome prior to 142.0.7444.59. A remote attacker who convinced a user to engage in specific UI gestures could perform UI spoofing via a crafted HTML page.

Out of bounds read in WebXR in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

Out-of-bounds read in the V8 engine in Google Chrome prior to 142.0.7444.59. A remote attacker could perform an out-of-bounds memory read via a crafted HTML page.

Inappropriate implementation in Autofill in Google Chrome prior to 142.0.7444.59. A remote attacker who convinced a user to engage in specific UI gestures could obtain potentially sensitive information from process memory.

Inappropriate implementation in App-Bound Encryption in Google Chrome on Windows prior to 142.0.7444.59 allowed a local attacker to obtain potentially sensitive information from process memory via a malicious file. (Chromium security severity: Medium)

Use after free in Ozone in Google Chrome on Linux and ChromeOS prior to 142.0.7444.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: Medium)

Use-after-free vulnerability in the PageInfo component of Google Chrome prior to version 142.0.7444.59. A remote attacker who convinces a user to perform specific UI gestures can potentially exploit heap corruption via a crafted HTML page. (Severity: Medium)

Policy bypass in Extensions in Google Chrome prior to 142.0.7444.59 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process memory via a crafted Chrome Extension.

Incorrect security UI in Omnibox in Google Chrome on Android prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)

A race condition in Storage in Google Chrome on Windows prior to 142.0.7444.59 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Race condition vulnerability in the V8 engine of Google Chrome prior to version 142.0.7444.59. A remote attacker can potentially exploit heap corruption via a crafted HTML page. (Severity: High)

Inappropriate implementation in Extensions in Google Chrome prior to 142.0.7444.59. An attacker who convinced a user to install a malicious extension could bypass navigation restrictions via a crafted Chrome Extension.

Object lifecycle issue in Media in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)

Inappropriate implementation in V8 in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

Inappropriate implementation in Passkeys in Google Chrome prior to 140.0.7339.80 allowed a local attacker to obtain potentially sensitive information via debug logs. (Chromium security severity: Low)

Insufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80. A remote attacker could leak cross-origin data via Devtools.

Insufficient validation of untrusted input in Downloads in Google Chrome on Android prior to 140.0.7339.80 allowed a remote attacker to perform domain spoofing via a crafted HTML page.

Insufficient validation of untrusted input in Devtools in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to execute arbitrary code via user action in Devtools. (Chromium security severity: Low)

Inappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to perform UI spoofing via a crafted HTML page.

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 140.0.7339.80 allowed a remote attacker to bypass Mark of the Web via a crafted HTML page.

Out of bounds memory access in V8 in Google Chrome prior to 141.0.7390.122 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

Use after free in Safe Browsing in Google Chrome prior to 141.0.7390.107 allowed a remote attacker who had compromised the renderer process to potentially perform out of bounds memory access via a crafted HTML page.

Use after free in Storage in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to execute arbitrary code via a crafted video file. (Chromium security severity: High)

Heap buffer overflow in Sync in Google Chrome prior to 141.0.7390.65 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

Use-after-free vulnerability in V8 in Google Chrome prior to 141.0.7390.54. A remote attacker can potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Low)

Inappropriate implementation in Storage in Google Chrome on Mac prior to 141.0.7390.54 allowed a remote attacker to perform domain spoofing via a crafted video file. (Chromium security severity: Low)

Off by one error in V8 in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

Inappropriate implementation in Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform domain spoofing via a crafted HTML page. (Chromium security severity: Medium)

Inappropriate implementation in Media in Google Chrome on Windows prior to 141.0.7390.54. A remote attacker who convinced a user to engage in specific UI gestures could perform domain spoofing via a crafted HTML page.

Out of bounds read in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page.

Side-channel information leakage in Tab in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

Inappropriate implementation in the Omnibox in Google Chrome on Android prior to 141.0.7390.54 allowed a remote attacker to spoof the contents of the URL bar via a crafted HTML page. (Chromium security severity: Medium).

Inappropriate implementation in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page.

A vulnerability in Google Chrome prior to 141.0.7390.54 involves side-channel information leakage in Storage. A remote attacker can perform arbitrary read/write via a crafted HTML page.

Heap buffer overflow in Video in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Heap buffer overflow in WebGPU in Google Chrome prior to 141.0.7390.54 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

A use-after-free vulnerability in WebRTC in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

A use-after-free vulnerability in Dawn in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Inappropriate implementation in Mojo in Google Chrome on Android, Linux, ChromeOS prior to 140.0.7339.127 allowed a remote attacker to bypass site isolation via a crafted HTML page. (Chromium security severity: High)

A use-after-free vulnerability in the Service Worker mechanism in Google Chrome on Desktop prior to 140.0.7339.127. A remote attacker could potentially exploit heap corruption via a crafted HTML page.

Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass content security policy via a crafted HTML page.

Inappropriate implementation in V8 in Google Chrome prior to 129.0.6668.70. A remote attacker could potentially perform out of bounds memory access via a crafted HTML page.

In Google Chrome prior to version 116.0.5845.110, there was an out of bounds memory access in fonts, allowing a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Inappropriate implementation in Fullscreen in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page.

Inappropriate implementation in Permission Prompts in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page.

Inappropriate implementation in Color in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page.