CVE Vulnerability Catalog

Use after free in Extensions in Google Chrome prior to version 116.0.5845.96 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

Inappropriate implementation in Fullscreen in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page.

Inappropriate implementation in Permission Prompts in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page.

Inappropriate implementation in WebShare in Google Chrome on Android prior to version 116.0.5845.96 allowed a remote attacker to spoof the contents of a dialog URL via a crafted HTML page.

Heap buffer overflow in Mojom IDL in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker who compromised the renderer process and gained control of a WebUI process to potentially exploit heap corruption via a crafted HTML page.

Inappropriate implementation in Autofill in Google Chrome on Android prior to version 116.0.5845.96 allowed a remote attacker to bypass Autofill restrictions via a crafted HTML page.

Inappropriate implementation in Color in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to obfuscate security UI via a crafted HTML page.

Inappropriate implementation in App Launcher in Google Chrome on iOS prior to version 116.0.5845.96 allowed a remote attacker to potentially spoof elements of the security UI via a crafted HTML page.

A use after free vulnerability in DNS in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Insufficient validation of untrusted input in XML in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to bypass file access restrictions via a crafted HTML page.

In Google Chrome prior to version 116.0.5845.96, a use after free vulnerability in the Audio module allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page if a user engaged in specific UI interaction.

Out of bounds memory access in V8 in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Heap buffer overflow in Skia in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

Heap buffer overflow in ANGLE in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Type confusion in V8 in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

A use after free vulnerability in the Network component of Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page after eliciting a browser shutdown.

Inappropriate implementation in Fullscreen in Google Chrome on Android prior to version 116.0.5845.96 allowed a remote attacker to potentially spoof the contents of the Omnibox (URL bar) via a crafted HTML page.

A use after free vulnerability in Device Trust Connectors in Google Chrome prior to version 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

The Broadcom RAID Controller web interface is vulnerable to client-side control bypass, leading to unauthorized data access for low privileged users.

Ghost is an open source content management system. Versions prior to 5.59.1 are subject to a vulnerability that allows authenticated users to upload files that are symlinks, which can lead to unauthorized reading of any files on the host operating system.