CVE Vulnerability Catalog

Type confusion in Accessibility in Google Chrome on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

A race condition in FileSystem in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. The issue has a high severity.

A buffer overflow in ANGLE in Google Chrome on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

An improper input validation vulnerability in Media in Google Chrome on Windows prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Improper input validation in Input in Google Chrome on Android before 152.0.7977.65. A remote attacker who compromised the renderer process can potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Out-of-bounds write in ANGLE in Google Chrome prior to 152.0.7977.65. A remote attacker can exploit a crafted HTML page to execute arbitrary code outside the sandbox.

Improper input validation in Chromecast in Google Chrome prior to 152.0.7977.65. A remote attacker who compromised the renderer process can potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Use after free in PDF in Google Chrome prior to 152.0.7977.65. A remote attacker can execute arbitrary code inside the sandbox via a crafted PDF file.

In Google Chrome prior to 152.0.7977.65, improper input validation in Printing allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Use after free in the V8 component in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Severity: Medium)

Improper enforcement of behavioral workflow in Media in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. Severity: Medium.

Improper state validation in Parser in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Severity: Medium)

Improper state validation in Performance in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to potentially read memory inside the sandbox via a crafted HTML page. (Severity: High)

Race condition in GPU in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Medium)

Memory corruption in Tint in Google Chrome on Mac prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: High)

Race condition in Start in Google Chrome on Android prior to 152.0.7977.65 allowed a local attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a co-installed app. (Chromium security severity: Medium)

Use after free in Chromecast in Google Chrome prior to 152.0.7977.65 allowed a remote attacker who had compromised the renderer process to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Out of bounds write in ANGLE in Google Chrome on Windows prior to 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Severity: High)

Type confusion in V8 in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to read memory inside the sandbox via a crafted HTML page. (Severity: Low)

Use after free in Mobile in Google Chrome on iOS prior to 152.0.7977.65. A remote attacker could execute arbitrary code outside the sandbox via crafted network traffic.