AI assistant Gemini Data Compromise

The vulnerability of the AI assistant Gemini previously known as GLIC Gemini Live in Chrome in Google Chrome and Microsoft Edge is related to the improper implementation of security functions on the client side. Exploiting this vulnerability allows a malicious actor to compromise data integrity...

Codecs Component Confidential Data Access

The vulnerability of the Codecs components in Google Chrome and Microsoft Edge relates to reading data from buffer areas beyond their permitted limits. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

Spellcheck Component Confidential Data Access

The vulnerability of the Spellcheck component in Google Chrome and Microsoft Edge relates to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

DeviceBoundSessionCredentials Component Compromise Data Compromise

The vulnerability of the DeviceBoundSessionCredentials component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise data integrity through a specially crafted HTML page...

XR components Confidential Data Access

The vulnerability of the XR web browsers Google Chrome and Microsoft Edge is related to errors during initialization of variables. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...

USB Component DoS

The vulnerability of the USB component in Google Chrome and Microsoft Edge browsers is related to a lack of data security mechanisms. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

PageInfo Component DoS

The vulnerability of the PageInfo component in Google Chrome and Microsoft Edge relates to the improper presentation of critical information to the user interface. Exploiting this vulnerability can allow an attacker to cause a service failure through a specially created HTML page...

PerformanceAPIs Component Confidential Data Access

The vulnerability of the PerformanceAPIs component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

Google Chrome Microsoft Edge Data Compromise

The vulnerability of the UI components in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service interruptions through the use of a...

Storage Component DoS

The vulnerability of the Storage component in Google Chrome and Microsoft Edge relates to operations that occur outside the buffer in memory. Exploiting this vulnerability could allow an attacker to cause a service failure through a specially created HTML page...

MediaCapture Component Compromise Data Compromise

The vulnerability of the MediaCapture component in Google Chrome and Microsoft Edge involves exploiting authentication bypass techniques. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially crafted HTML page...

Media UI component in Data Compromise

The vulnerability of the Media UI component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service interruptions through the use...

WebAppInstalls Component Compromise DoS

The vulnerability of the WebAppInstalls component in Google Chrome and Microsoft Edge is related to the false representation of critical information to the user’s interface. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and also cause service interruptions...

Extensions Component Data Compromise

The vulnerability of the Extensions component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity remotely...

PermissionsPolicy Component Compromise Data Compromise

The vulnerability of the PermissionsPolicy component in Google Chrome and Microsoft Edge is related to the implementation of security features at the client-side. Exploiting this vulnerability could allow a malicious actor to compromise data integrity through a specially crafted HTML page...

SurfaceCapture component in Google

The vulnerability of the SurfaceCapture component in Google Chrome and Microsoft Edge relates to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data, as well as cause service interruptions through...

Paint Component Data Compromise

The vulnerability of the Paint component in Google Chrome and Microsoft Edge relates to the user interface’s false representation of critical information. Exploiting this vulnerability allows a malicious actor to compromise data integrity through a specially created HTML page...

SVG Component Confidential Data Access

The vulnerability of the SVG component in Google Chrome and Microsoft Edge relates to the manipulation of inter-site requests. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data through a specially created HTML page...

WebXR Component Data Compromise

The vulnerability of the WebXR component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to compromise data integrity through a specially crafted HTML page...

Network Component Confidential Data Access

The vulnerability of the Network component in Google Chrome and Microsoft Edge is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential data through a specially created HTML page...