The vulnerability of the Google Chrome browser’s Media component, which allows a hacker to read and write arbitrary files.

The vulnerability of the Google Chrome browser’s Media component is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to read and write arbitrary files using a specially crafted HTML page...

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser allows a hacker to gain access to and modify files.

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser is related to an incorrect path limitation for accessing restricted directories. Exploiting this vulnerability could allow a malicious actor to remotely access and modify files by downloading a special...

The vulnerability of the Print Preview function in Google Chrome browsers allows a hacker to install any desired extension.

The vulnerability of the Print Preview function in Google Chrome browsers relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to install any desired extension through a specially created HTML page...

CVE-2023-24477

In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session...

CVE-2023-24477 Session Fixation in Guardian/CMC before 22.6.2

In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session...

Session Fixation in Guardian/CMC before 22.6.2

Summary In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's session. Impact Unauthorized...

DEBIAN-CVE-2023-4074

Use after free in Blink Task Scheduling in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to circumvent existing security restrictions.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to bypass existing security restrictions remotely...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Google Update component in the Google Chrome browser allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Update component in Google Chrome browser relates to the disclosure of information. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

DEBIAN-CVE-2023-3732

Out of bounds memory access in Mojo in Google Chrome prior to 115.0.5790.98 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

UBUNTU-CVE-2022-4907

Uninitialized Use in FFmpeg in Google Chrome prior to 108.0.5359.71 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. Chromium security severity: Medium...

The vulnerability of the WebRTC technology implementation in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of the WebRTC technology implementation in Google Chrome browser is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine allows attackers to trigger a service failure or execute arbitrary code.

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to access to resources through incompatible types. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code using a specially crafted HTML page...

PT-2023-3571 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 115.0.5790.98 Description: The issue is related to a use after free in WebRTC, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary co...

The vulnerability of the Fullscreen application interface of Google Chrome’s browser allows a perpetrator to compromise data integrity.

The vulnerability of the Fullscreen application interface of Google Chrome browser is related to improper security checks for standard elements. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

The vulnerability of Google Chrome’s libphonenumber library allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of Google Chrome’s libphonenumber library is related to buffer overflows and the installation of malicious extensions. Exploiting this vulnerability can allow an attacker to access sensitive data, compromise its integrity, and even cause service interruptions through a specially...

The vulnerability of the Autofill Payments function in Google Chrome browser allows for the insertion of arbitrary codes.

The vulnerability of Google Chrome’s Autofill Payments function is related to the use of memory after it is freed. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of Autofill interfaces in Google Chrome and Microsoft Edge browsers allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of Autofill interfaces in Google Chrome and Microsoft Edge browsers is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through a specially...