CVE-2024-0223

CVE-2024-0223 describes a heap buffer overflow in ANGLE used by Google Chrome/Chromium, allowing potential remote code execution via a crafted HTML page. Affected component: ANGLE within Chromium-based browser code paths prior to version 120.0.6099.199. Impact per sources is high (C/H/I/A) with n...

CVE-2024-0223

Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-0222

Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-0222

CVE-2024-0222 involves a use-after-free in ANGLE used by Google Chrome/Chromium, allowing a remote attacker who gains renderer process access to potentially corrupt the heap via a crafted HTML page. Affected software version appears to be Chrome/Chromium up to and including 120.0.6099.199 (and Ch...

CVE-2024-0222

Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a heap buffer overflow vulnerability that is caused by incorrect boundary checking in ANGLE. An attacker can exploit this vulnerability to execute arbitrary code on the system or cause the application to...

CVE-2024-0223

Heap buffer overflow in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from a memory misreference vulnerability that is due to a free use after in ANGLE. An attacker can exploit the vulnerability to execute arbitrary code on the system...

FreeBSD : chromium -- multiple security fixes (3ee577a9-aad4-11ee-86bb-a8a1599412c6)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 3ee577a9-aad4-11ee-86bb-a8a1599412c6 advisory. - Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a remote attacker w...

Google Chrome < 120.0.6099.200 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 120.0.6099.200. It is, therefore, affected by multiple vulnerabilities as referenced in the 202401stable-channel-update-for-desktop advisory. - Use after free in ANGLE in Google Chrome prior to 120.0.6099.199 allowed a...

PT-2024-1013 · Google +5 · Angle Library +6

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.199 Microsoft Edge affected versions not specified Description: The issue is related to a use after free in the ANGLE library, which can be exploited by a remote attacker who has compromised the...

PT-2024-1065 · Google +4 · Angle Library +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 120.0.6099.199 Description: A heap buffer overflow in the ANGLE library of Google Chrome allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. The issue is related to the WebG...

Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.199 for Mac,Linux and 120.0.6099.199/200 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 120.0.6099.199 for Mac and...

chromium -- multiple security fixes

Chrome Releases reports: This update includes 6 security fixes: 1501798 High CVE-2024-0222: Use after free in ANGLE. Reported by Toan suto Pham of Qrious Secure on 2023-11-13 1505009 High CVE-2024-0223: Heap buffer overflow in ANGLE. Reported by Toan suto Pham and Tri Dang of Qrious Secure on...

Google Chrome < 120.0.6099.199 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 120.0.6099.199. It is, therefore, affected by multiple vulnerabilities as referenced in the 202401stable-channel-update-for-desktop advisory. - Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a...

Google Chrome < 120.0.6099.199 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 120.0.6099.199. It is, therefore, affected by multiple vulnerabilities as referenced in the 202401stable-channel-update-for-desktop advisory. - Use after free in WebGPU in Google Chrome prior to 120.0.6099.199 allowed a...

golang: html/template: improper sanitization of CSS values

A flaw was found in golang where angle brackets were not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character could result in the CSS context unexpectedly closing, allowing for the injection of unexpected HMTL if...

golang: html/template: improper sanitization of CSS values

A flaw was found in golang where angle brackets were not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character could result in the CSS context unexpectedly closing, allowing for the injection of unexpected HMTL if...

golang: html/template: improper sanitization of CSS values

A flaw was found in golang where angle brackets were not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character could result in the CSS context unexpectedly closing, allowing for the injection of unexpected HMTL if...

golang: html/template: improper sanitization of CSS values

A flaw was found in golang where angle brackets were not considered dangerous characters when inserted into CSS contexts. Templates containing multiple actions separated by a '/' character could result in the CSS context unexpectedly closing, allowing for the injection of unexpected HMTL if...