All CVEs — page 286 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A confused deputy vulnerability in Chrome's Contextual Tasks feature allows remote attackers to bypass system access restrictions by tricking the browser into making privileged requests on their behalf. This could enable attackers to access restricted system resources or perform actions with elevated privileges.
This flaw involves a use-after-free vulnerability in Chrome Tabs, allowing remote attackers to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
Chrome's remote desktop feature on Mac had incomplete cleanup routines that allowed attackers to bypass system access restrictions through crafted network traffic, potentially enabling unauthorized access to the user's system.
A type confusion vulnerability in Google Chrome's ANGLE graphics library allows remote attackers to execute arbitrary code outside the sandbox after compromising the renderer process. This represents a critical escalation path from renderer compromise to full system access.
A buffer overflow vulnerability in Google Chrome's font handling allows remote attackers to execute arbitrary code outside the sandbox after compromising the renderer process. This represents a critical escalation path from renderer compromise to system-level code execution.
This flaw involves a use-after-free vulnerability in Google Chrome's GarbageCollection prior to version 155.0.8059.39, allowing remote attackers to execute arbitrary code within a sandboxed environment via a crafted HTML page.
A use after free vulnerability in Google Chrome's Streaming feature allowed remote attackers to potentially execute arbitrary code via a crafted HTML page, leveraging social engineering.
This flaw involves a use after free vulnerability in Tint, a component of Google Chrome prior to 155.0.8059.39, allowing remote attackers to potentially execute arbitrary code outside the sandbox via a crafted HTML page.