CVE Vulnerability Catalog

Information leak vulnerability in the Navigation component in Google Chrome prior to 153.0.8010.36. A remote attacker who compromised the renderer process could bypass site isolation via a crafted HTML page.

Incorrect authorization vulnerability in the Isolated component in Google Chrome prior to 153.0.8010.36. A remote attacker could spoof UI elements via a crafted HTML page.

Observable discrepancy vulnerability in the Network component in Google Chrome prior to 153.0.8010.36. A remote attacker could obtain cross-origin data via a crafted HTML page.

Clickjacking vulnerability in the Input component in Google Chrome prior to 153.0.8010.36. A remote attacker who compromised the renderer process and leveraged social engineering could spoof UI elements via a crafted HTML page.

Missing authorization vulnerability in the Extensions component in Google Chrome prior to 153.0.8010.36. A remote attacker who compromised the renderer process could potentially execute arbitrary code outside the sandbox via crafted network traffic.

Use after free vulnerability in the V8 component in Google Chrome prior to 153.0.8010.36. A remote attacker could execute arbitrary code inside the sandbox via a crafted HTML page.

Information loss or omission vulnerability in the Safebrowsing component in Google Chrome on Mac prior to 153.0.8010.36. A remote attacker could bypass system access restrictions via a crafted HTML page.

Missing authorization vulnerability in the WebView component in Google Chrome on Android prior to 153.0.8010.36. A remote attacker leveraging social engineering could bypass system access restrictions via crafted network traffic.

Use after free vulnerability in the DevTools component in Google Chrome prior to 153.0.8010.36. A local attacker could execute arbitrary code outside the sandbox via a local program.

Improper state validation vulnerability in the Safebrowsing component in Google Chrome prior to 153.0.8010.36. A remote attacker could bypass system access restrictions via a crafted HTML page.

Information leak vulnerability in CORS in Google Chrome prior to 153.0.8010.36. A remote attacker who compromised the renderer process could obtain cross-origin data via a crafted HTML page. (Severity: Medium)

Uncontrolled search path element in CredentialProvider in Google Chrome on Windows prior to 153.0.8010.36. A local attacker could execute arbitrary code outside the sandbox via a local program. (Severity: Medium)

Numeric truncation error in Media in Google Chrome prior to 153.0.8010.36. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Medium)

Type confusion in Rust in Google Chrome on Windows prior to 153.0.8010.36. A remote attacker could potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Medium)

Buffer overflow in WebGL in Google Chrome prior to 153.0.8010.36. A remote attacker could execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Critical)

Use after free in Passwords in Google Chrome prior to 153.0.8010.36. A remote attacker leveraging social engineering could potentially execute arbitrary code outside the sandbox via UI Interaction. (Severity: Medium)

Out of bounds read in Chromoting in Google Chrome on Windows prior to 153.0.8010.36. A local attacker could read memory outside the sandbox via a local program. (Severity: High)

Use after free in Core in Google Chrome on Windows prior to 153.0.8010.36. A remote attacker who compromised the renderer process could potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: High)

Race condition in DataTransfer in Google Chrome prior to 153.0.8010.36. A remote attacker leveraging social engineering could obtain sensitive information via a crafted HTML page. (Severity: Low)

Missing authorization in WebView in Google Chrome on Android prior to 153.0.8010.36. A remote attacker leveraging social engineering could potentially bypass system access restrictions via crafted network traffic. (Severity: Low)