CVE Vulnerability Catalog

A type confusion vulnerability in V8 in Google Chrome prior to 148.0.7778.216 allowed an attacker who convinced a user to install a malicious extension to execute arbitrary code inside a sandbox via a crafted Chrome Extension. The issue is rated as medium severity.

Insufficient validation of untrusted input in USB in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code via a crafted HTML page.

Insufficient validation of untrusted input in Skia in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

An integer overflow in ANGLE in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to leak cross-origin data via a crafted HTML page.

An out-of-bounds read vulnerability in Headless mode in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

A use-after-free vulnerability in DOM in Google Chrome prior to 148.0.7778.216 allows a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

An integer overflow in WTF in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

A Use-After-Free vulnerability in the WebMIDI component of Google Chrome on Android prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity.

A Use-After-Free vulnerability in the WebCodecs component of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

A Use-After-Free vulnerability in the Skia library in Google Chrome prior to 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

An integer overflow in the Skia library in Google Chrome prior to 148.0.7778.216 allows a remote attacker who has compromised the renderer process to execute arbitrary code inside a sandbox via a crafted HTML page.

A Use-After-Free vulnerability in the SVG component of Google Chrome prior to version 148.0.7778.216 allows a remote attacker to execute arbitrary code within a sandbox via a crafted HTML page. The issue is rated as High severity by Chromium.

A race condition in WebAudio in Google Chrome prior to 148.0.7778.216 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

A Use-After-Free vulnerability in WebAppInstalls in Google Chrome on Mac prior to 148.0.7778.216 allowed a remote attacker, after convincing a user to perform specific UI gestures, to execute arbitrary code via a crafted HTML page.

A Use-After-Free vulnerability in the Views component of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker, after convincing a user to perform specific UI gestures, to execute arbitrary code via a crafted HTML page.

A use-after-free vulnerability was found in PDFium in Google Chrome prior to 148.0.7778.216. A remote attacker could potentially exploit heap corruption via a crafted PDF file.

A Use-After-Free vulnerability in the PerformanceManager component of Google Chrome prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity.

A Use-After-Free vulnerability in the Passwords component of Google Chrome on Windows prior to version 148.0.7778.216 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is rated as High severity by the Chromium team.

In AnythingLLM prior to 1.13.0, the filesystem-search-files agent skill passes the LLM-controlled pattern parameter to ripgrep as a positional argument without a -- end-of-options separator. This allows arbitrary command execution by providing a pattern like --pre=/bin/sh, which combined with the filesystem-write-text-file skill enables remote code execution in the server container.

Better Auth, a TypeScript authentication library, has a vulnerability in its HTTP rate limiter that keys requests by the exact textual IP address from the x-forwarded-for header. This allows IPv6 attackers to bypass rate limits by rotating through different source addresses or varying the textual encoding of a single address.