CVE-2024-6995

CVE-2024-6995 describes an inappropriate Fullscreen implementation in Google Chrome on Android before 127.0.6533.72, which could allow a remote attacker who entices a user to perform specific UI gestures to spoof the Omnibox (URL bar) contents via a crafted HTML page. Connected advisories indicat...

CVE-2024-6994

Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-6994

CVE-2024-6994: A heap buffer overflow in the Layout component of Google Chrome/Chromium prior to 127.0.6533.72 enables remote heap corruption via a crafted HTML page. Public sources corroborate the issue across Chrome/Chromium derivatives (e.g., Astra Linux reports 127.0.6533.72; Debian security ...

CVE-2024-6991

Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-6991

CVE-2024-6991 corresponds to a use-after-free in Chromium’s Dawn component, allowing a remote attacker to potentially trigger heap corruption via a crafted HTML page. The vulnerability affects Google Chrome/Chromium prior to version 127.0.6533.72, with multiple downstream advisories noting fixes ...

CVE-2024-6991

Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-6991

Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-6988

Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-6989

CVE-2024-6989 is a use-after-free in the Loader path of Google Chrome/Chromium. The flaw could allow remote code execution via a crafted HTML page by triggering heap corruption. Affected software is Chromium/Chrome before version 127.6533.72; remediation is a patch released in Chromium updates (e...

CVE-2024-6989

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-6988

CVE-2024-6988 is a Use-After-Free in Downloads in Google Chrome on iOS prior to 127.6533.72, potentially enabling heap corruption via a crafted HTML page. Connected documents confirm Chromium/Chromium-based updates with fixes (e.g., chromium packages updated to 127.0.6533.88 in Debian; Fedora upd...

CVE-2024-6989

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-6988

Use after free in Downloads in Google Chrome on iOS prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-6989

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

PT-2024-5753 · Google +3 · Chromium +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.99 Description: The issue is related to an inappropriate implementation in V8, which can lead to heap corruption. A remote attacker can potentially exploit this via a crafted HTML page, allowing them...

CVE-2024-7255

Out of bounds read in WebTransport in Google Chrome prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: High...

CVE-2024-7256

Insufficient data validation in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2024-7256

Insufficient data validation in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...

CVE-2024-6990

Uninitialized Use in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. Chromium security severity: Critical...

CVE-2024-7256

Insufficient data validation in Dawn in Google Chrome on Android prior to 127.0.6533.88 allowed a remote attacker to execute arbitrary code via a crafted HTML page. Chromium security severity: High...