CVE Vulnerability Catalog

Information leak in BFCache in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to obtain cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

Missing authorization in Lighthouse in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass site isolation via a crafted HTML page. (Severity: Medium)

Information leak in CORS in Google Chrome prior to 152.0.7977.65. A remote attacker who had compromised the renderer process could leak cross-origin data via a crafted HTML page.

Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65. A remote attacker could bypass site isolation via a crafted HTML page.

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Out of bounds read in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Incorrect authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Severity: Medium)

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially obtain cross-origin data via a crafted HTML page. (Severity: High)

Uninitialized resource in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Uninitialized resource in Skia in Google Chrome prior to 152.0.7977.65. A remote attacker who had compromised the renderer process could potentially obtain cross-origin data via a crafted HTML page.

Missing authorization in SiteIsolation in Google Chrome prior to 152.0.7977.65. A remote attacker who had compromised the renderer process could bypass site isolation via a crafted PDF file.

Observable discrepancy in CustomTabs in Google Chrome on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. (Severity: Medium)

Improper input validation in Editing in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process and leveraged social engineering to bypass web origin policy via a crafted HTML page. (Severity: Medium)

Information leak in Core in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. (Severity: Medium)

Observable discrepancy in the CustomTabs component in Google Chrome on Android prior to 152.0.7977.65 allowed a local attacker to obtain cross-origin data via a co-installed app. The issue has a medium severity rating.

A vulnerability in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to bypass site isolation via a crafted HTML page. The issue is related to incomplete cleanup in the SiteIsolation component.

Race condition vulnerability in the Payments component of Google Chrome prior to 152.0.7977.65. A remote attacker who compromised the renderer process could leak cross-origin data via a crafted HTML page. (Chromium security severity: Medium)

GitHub CLI (gh) versions 2.28.0 through 2.97.0 bind the local listener created by gh codespace ports forward to all available network interfaces by default. While port forwarding is active, a service in a Codespace can become reachable through the user's non-loopback local IP addresses. This issue is fixed in version 2.98.0.

A permissions issue was addressed with additional restrictions in iOS and iPadOS. A malicious app may be able to enumerate installed apps.

rclone before 1.74.4 fails to mask special permission bits when applying source-supplied mode metadata in the local backend, allowing attackers to set setuid/setgid bits on attacker-controlled files. When copying with metadata preservation from an untrusted remote, attackers can plant a setuid binary that escalates privileges to root if rclone runs as root.