CVE-2023-2312

Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-2312

Use after free in Offline in Google Chrome on Android prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

PT-2023-4481 · Google +3 · Google Chrome +3

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.96 Description: The issue is related to a heap buffer overflow in the Mojom IDL component of Google Chrome, which could allow a remote attacker who has compromised the renderer process and gained...

Google Chrome 安全漏洞

Google Chrome is a web browser from Google Inc. in the United States. A security vulnerability exists in Google Chrome prior to version 116.0.5845.96, which stems from an inadequate enforcement of Extensions API policies, allowing remote attackers to bypass corporate policies via a crafted HTML...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, Inc. in the United States. A security vulnerability exists in Google Chrome prior to version 116.0.5845.96, which originates from the presence of post-release reuse in DNS, allowing remote attackers to potentially exploit heap corruption via a crafted...

Google Chrome 安全漏洞

Google Chrome is a web browser by Google, Inc. A security vulnerability exists in versions prior to Google Chrome 116.0.5845.96, which stems from an improper implementation of WebShare and allows remote attackers to spoof dialog boxes via a crafted HTML page...

The vulnerability of the Accessibility component in Google Chrome allows a perpetrator to read and write arbitrary files.

The vulnerability of the Accessibility component in Google Chrome relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to read and write arbitrary files using a specially crafted HTML page...

The vulnerability of the XML component of the Google Chrome browser allows a hacker to bypass the ASLR protection mechanism.

The vulnerability of the Google Chrome XML browser component is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to bypass the ASLR protection mechanism by using a specially created HTML page...

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to circumvent existing security restrictions.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browsers is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to circumvent existing security restrictions by using a specially crafted HTML page...

The vulnerability of Google Chrome’s URL formatting mechanism, which allows attackers to carry out spoofing attacks

The vulnerability of Google Chrome’s URL formatting mechanism is related to errors in information representation by the user interface. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks using a specially crafted HTML page...

The vulnerability of the Extensions component of the Google Chrome browser allows a hacker to manipulate the extension storage.

The vulnerability of the Google Chrome browser’s Extensions component is related to lack of access control. Exploiting this vulnerability could allow a malicious actor to forge extension repositories using a specially crafted HTML page...

Authorization Bypass

chromium is vulnerable to Authorization Bypass. The vulnerability exists due to the inappropriate implementation in the prompts in the library, which allows an attacker to bypass permission restrictions via a crafted HTML page...

Cross-Origin Resource Sharing (CORS)

chromium is vulnerable to Cross-Origin Resource Sharing CORS. The vulnerability exists due to the inappropriate implementation in CORS of the library, which allows an attacker to leak cross-origin data via a maliciously crafted HTML page...

Authorization Bypass

chromium is vulnerable to Authorization Bypass. The vulnerability exists due to the inappropriate implementation in the prompts in the library, which allows an attacker to bypass permission restrictions via a crafted HTML page...

Improper Input Validation

chromium is vulnerable to Improper Input Validation. The vulnerability exists due to lack of user input validation, which allows an attacker who convince a user to install a malicious extension to bypass file access checks via a crafted HTML page...

Improper Input Validation

chromium is vulnerable to Improper Input Validation. Insufficient data validation in DevTools allow a remote attacker to bypass navigation restrictions via a crafted HTML page...

Type Confusion

chromium is vulnerable to Type Confusion. A remote attacker is able to potentially exploit heap corruption via a crafted HTML page...

Spoofing Attack

chromium is vulnerable to Spoofing Attack. The vulnerability exists because the inappropriate implementation in the Picture In Picture of the library, allowing an attacker to spoof the contents of the Omnibox URL bar via a maliciously crafted HTML page through the renderer process...

Out Of Bounds Memory Access

chromium is vulnerable to Out-of-bound Memory Access. A remote attacker is able to potentially exploit heap corruption via a crafted HTML page, resulting in out of bounds memory access...

Out-of-Bounds Write

chromium is vulnerable to Out-of-Bounds Write. Out of bounds write in Swiftshader allows a remote attacker to potentially exploit heap corruption via a crafted HTML page...