CVE Vulnerability Catalog

Buffer overflow in GPU in Google Chrome on Windows prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: High)

Use after free in TabStrip in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. (Severity: Low)

Use after free in Browser in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: High)

Information leak in MediaCapture in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to potentially leak sensitive information via a crafted HTML page. (Severity: Medium)

Use-after-free in WebRTC in Google Chrome prior to 152.0.7977.75. A remote attacker could exploit a crafted HTML page to execute arbitrary code inside the sandbox.

Incorrect authorization in TabStrip in Google Chrome prior to 152.0.7977.75. A remote attacker who compromised the renderer process and leveraged social engineering could execute arbitrary code outside the sandbox.

Incorrect authorization in Chromoting in Google Chrome on Windows prior to 152.0.7977.75. A local attacker could execute arbitrary code outside the sandbox via a local program.

Use-after-free in Dawn in Google Chrome on Android prior to 152.0.7977.75. A remote attacker could execute arbitrary code outside the sandbox via a crafted HTML page.

Incorrect authorization in SiteSettings in Google Chrome prior to 152.0.7977.75. A remote attacker could bypass system access restrictions via a crafted HTML page.

Incorrect authorization in Actor in Google Chrome prior to 152.0.7977.75. A remote attacker who compromised the renderer process could bypass web origin policy via a crafted HTML page.

UI misrepresentation in FullScreen in Google Chrome on Android prior to 152.0.7977.75. A remote attacker could spoof the address bar via a crafted HTML page.

Confused deputy in CredentialProvider in Google Chrome on Windows prior to 152.0.7977.75. A remote attacker who compromised the renderer process could leak sensitive information via a crafted HTML page.

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75. A remote attacker who compromised the renderer process could bypass web origin policy via a crafted HTML page.

Incorrect authorization in Autofill in Google Chrome on Android prior to 152.0.7977.75. A remote attacker leveraging social engineering could obtain sensitive information via a crafted HTML page.

Uninitialized resource in V8 in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Improper input validation in DataTransfer in Google Chrome prior to 152.0.7977.75 allowed a remote attacker leveraging social engineering to bypass system access restrictions via a co-installed app. (Chromium security severity: High)

Use after free in Proxy in Google Chrome prior to 152.0.7977.75 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Chromium security severity: High)

Missing authorization in FileSystem in Google Chrome prior to 152.0.7977.75 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

Net::DNS versions before 1.57 for Perl allow memory exhaustion via unbounded recursion in sig_data when re-encoding a message with a misplaced TSIG record. The recursion is reached only when the decoded TSIG carries an empty MAC and only from code that re-encodes a decoded message, such as a forwarder or a proxy. Each cycle re-encodes the whole message, so fewer than 100 bytes on the wire exhaust available memory and terminate the process.

WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass in encryptPass.json.php that allows unauthenticated attackers to compute valid HMAC tokens using the public site URL and current time. Attackers can forge authentication tokens by computing hash_hmac with the site's base URL as the key and submit arbitrary passwords to receive encrypted hashes, enabling offline precomputation attacks against stolen password databases.