CVE Vulnerability Catalog

Incorrect authorization in Browser in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Low)

Use after free in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Track in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Improper state validation in DevTools in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Information leak in Autofill in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to obtain sensitive information via a crafted HTML page. (Chromium security severity: Medium)

Type confusion in V8 in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Use after free in Media in Google Chrome prior to 155.0.8059.39 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Information leak vulnerability in the Payments component of Google Chrome prior to version 155.0.8059.39. A remote attacker can leverage social engineering to obtain sensitive information via a crafted HTML page.

Use after free vulnerability in the Media component of Google Chrome prior to version 155.0.8059.39. A remote attacker can execute arbitrary code inside the sandbox via a crafted HTML page.

Use after free vulnerability in the Modularization component of Google Chrome prior to version 155.0.8059.39. A remote attacker can execute arbitrary code inside the sandbox via a crafted HTML page.

Incorrect authorization vulnerability in the Bluetooth component of Google Chrome prior to version 155.0.8059.39. A remote attacker can obtain sensitive information via a crafted HTML page.

Incorrect authorization vulnerability in the Selection component of Google Chrome on iOS prior to version 155.0.8059.39. A remote attacker can obtain sensitive information via a crafted HTML page.

Incorrect reference resolution vulnerability in the Autofill component of Google Chrome on Android prior to version 155.0.8059.39. A remote attacker can leverage social engineering to obtain sensitive information via a crafted HTML page.

Confused deputy in Contextual Tasks in Google Chrome prior to 155.0.8059.39 allowed a remote attacker who had compromised the renderer process to bypass system access restrictions into a privileged page via a crafted HTML page.

Type confusion vulnerability in the ANGLE component of Google Chrome prior to version 155.0.8059.39. A remote attacker who had compromised the renderer process could potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Buffer overflow vulnerability in the Fonts component of Google Chrome prior to version 155.0.8059.39. A remote attacker who had compromised the renderer process could potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Use after free vulnerability in the GarbageCollection component of Google Chrome prior to version 155.0.8059.39. A remote attacker can execute arbitrary code inside the sandbox via a crafted HTML page.

Use after free vulnerability in the Streaming component of Google Chrome prior to version 155.0.8059.39. A remote attacker leveraging social engineering could potentially execute arbitrary code inside the sandbox via a crafted HTML page.

Incorrect reference resolution in Passwords in Google Chrome on iOS prior to 155.0.8059.39 allowed a local attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a local program. (Chromium security severity: Medium)

Use after free in Select in Google Chrome prior to 155.0.8059.39 allowed a remote attacker leveraging social engineering to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)