The vulnerability of WebRTC implementations in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of WebRTC implementations in Google Chrome and Microsoft Edge stems from the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information by...

The vulnerability of the Keyboard Inputs component in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Keyboard Inputs component in Google Chrome and Microsoft Edge relates to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected...

The vulnerability of the Dawn component in browsers such as Google Chrome and Microsoft Edge allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information by loading a specially create...

SUSE CVE-2024-5497

Out of bounds memory access in Browser UI in Google Chrome prior to 125.0.6422.141 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2024-5159

Heap buffer overflow in ANGLE in Google Chrome prior to 125.0.6422.76 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. Chromium security severity: High...

The vulnerability of the Downloads component of the Google Chrome browser, which allows a hacker to perform a spoofing attack

The vulnerability of the Downloads component of the Google Chrome browser is related to an improper limitation on the visible layers of the user interface. Exploiting this vulnerability allows a remote attacker to perform spoofing attacks...

Get Weekends Back: Put Chrome CVEs like CVE-2024-5274 on Auto-Patching

On May 9th, Google released an emergency update for its Chrome browser to patch a critical zero-day vulnerability, CVE-2024-4671. The "use after free" vulnerability affects the Visuals component of Chrome, which is responsible for rendering and displaying content. CVE-2024-4671 was identified and...

VulnCheck KEV: CVE-2024-4761

Google Chromium V8 Engine contains an unspecified out-of-bounds memory write vulnerability via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera...

Stable Channel Update for ChromeOS / ChromeOS Flex

Hello All, The Stable channel is being updated to 124.0.6367.95 Platform version: 15823.40.0 for most ChromeOS devices and will be rolled out over the next few days. If you find new issues, please let us know one of the following ways: File a bug Visit our Chrome OS communities General: Chromeboo...

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers allows attackers to access confidential information or cause service failures.

The vulnerability of the Autofill function in Microsoft Edge and Google Chrome browsers is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information or cause service failures...

The vulnerability in the implementation of the QUIC protocol in Microsoft Edge and Google Chrome browsers allows a attacker to access confidential information.

The vulnerability of Microsoft Edge and Google Chrome browsers’ QUIC protocol implementation is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information remotely...

The vulnerability of the site isolation function in Microsoft Edge and Google Chrome browsers allows a hacker to gain access to confidential information.

The vulnerability of site isolation functions in Microsoft Edge and Google Chrome browsers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information from a remote location...

The vulnerability of the WebAssembly component in Microsoft Edge and Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the WebAssembly component in Microsoft Edge and Google Chrome relates to the execution of operations outside the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the Font component (the default font used by Microsoft Edge and Google Chrome browsers) allows a perpetrator to gain access to potentially confidential information.

The vulnerability of the Font component the default font used by Microsoft Edge and Google Chrome browsers is related to memory-related reading operations. Exploiting this vulnerability can allow an attacker to gain access to potentially confidential information from a remote location...

The vulnerability of the Prompts component in Microsoft Edge and Google Chrome browsers allows a perpetrator to access confidential information.

The vulnerability of the Prompts component in Microsoft Edge and Google Chrome is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information remotely...

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge browsers allows a hacker to execute arbitrary code.

The vulnerability of the ANGLE library in Google Chrome and Microsoft Edge is related to buffer overflow in dynamic memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

The vulnerability of the Dawn component in browsers Google Chrome and Microsoft Edge allows a hacker to execute arbitrary code.

The vulnerability of the Dawn component in Google Chrome and Microsoft Edge relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through a specially created web page from a remote location...

SUSE CVE-2024-3832

Object corruption in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2024-3841

Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged page via a malicious file. Chromium security severity: Medium...

PT-2024-3077 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 124.0.6367.60 Description: The issue is related to insufficient data validation in the Browser Switcher component, which can be exploited by a remote attacker to inject scripts or HTML into a privileged page vi...