CVE Vulnerability Catalog

Improper access control in Workers in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass web origin policy via a crafted HTML page. (Severity: Medium)

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Critical)

Incorrect authorization in Network in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to bypass system access restrictions via a crafted HTML page. (Severity: Medium)

Use after free in Platform in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Severity: High)

Use after free in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Severity: Low)

Race condition in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to obtain sensitive information via a crafted HTML page. (Severity: Low)

Use after free in Script in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Severity: High)

Use after free in Chromoting in Google Chrome on Windows prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via crafted network traffic. (Severity: High)

Information leak in the Canvas component of Google Chrome prior to 152.0.7977.65. A remote attacker can use a crafted HTML page to leak cross-origin data.

Improper input validation in the Variations component of Google Chrome prior to 152.0.7977.65. A remote attacker can use crafted network traffic to potentially bypass web origin policy.

Incorrect authorization in the SiteIsolation component of Google Chrome prior to 152.0.7977.65. A remote attacker who compromised the renderer process and leveraged social engineering can bypass site isolation via a crafted HTML page.

Incorrect authorization in the Extensions component of Google Chrome prior to 152.0.7977.65. A remote attacker who compromised the renderer process can bypass web origin policy via a crafted HTML page.

Out of bounds write in the ANGLE component of Google Chrome prior to 152.0.7977.65. A remote attacker can use a crafted HTML page to potentially execute arbitrary code outside the sandbox.

Out of bounds write in the ANGLE component of Google Chrome prior to 152.0.7977.65. A remote attacker can use a crafted HTML page to potentially execute arbitrary code outside the sandbox.

Use after free in the WebRTC component of Google Chrome prior to 152.0.7977.65. A remote attacker can use a crafted HTML page to execute arbitrary code inside the sandbox.

Incorrect authorization in the Network component of Google Chrome prior to 152.0.7977.65. A remote attacker who compromised the renderer process can bypass site isolation via a crafted HTML page.

Information leak in the DOM component of Google Chrome prior to 152.0.7977.65. A remote attacker can use a crafted HTML page to bypass web origin policy.

Missing authorization in the Preload component of Google Chrome prior to 152.0.7977.65. A remote attacker who compromised the renderer process can bypass web origin policy via a crafted HTML page.

Use after free in Accessibility in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)

Improper input validation in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)