All CVEs — page 288 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A race condition in V8 of Google Chrome prior to 155.0.8059.39 allows a remote attacker to execute arbitrary code within the sandbox via a crafted HTML page, posing a significant security risk.
A flaw in Google Chrome prior to 155.0.8059.39 allowed remote attackers to execute arbitrary code via a crafted HTML page, due to an incorrect comparison in Fonts handling.
The flaw allows a remote attacker to obtain sensitive information via a crafted HTML page, due to incorrect authorization in Google Chrome's Autofill feature on Android versions prior to 155.0.8059.39.
This flaw involves a use after free vulnerability in Google Chrome's Bindings, allowing remote attackers to execute arbitrary code within a sandboxed environment. It is a high-severity issue that could lead to significant security breaches.
A buffer overflow vulnerability in ANGLE (Almost Native Graphics Layer Engine) within Google Chrome allows remote attackers to execute arbitrary code outside the sandbox after compromising the renderer process. This represents a critical escalation path from renderer compromise to system-level code execution.
This flaw allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page, leveraging social engineering on Google Chrome for Android versions prior to 155.0.8059.39.
A type confusion vulnerability in V8 of Google Chrome prior to 155.0.8059.39 could allow a remote attacker to execute arbitrary code within the sandbox via a specially crafted HTML page.
This flaw involves an integer overflow in WebGL in Google Chrome on Android, allowing remote attackers to potentially execute arbitrary code outside the sandbox via a crafted HTML page.
A race condition in Google Chrome's font handling allows a compromised renderer process to execute arbitrary code outside the sandbox, potentially leading to full system compromise. This represents a critical escalation path for attackers who already have renderer-level access.
A flaw in Google Chrome prior to 155.0.8059.39 allowed remote attackers to bypass site isolation through a crafted HTML page, leading to potential information leakage.
A use-after-free vulnerability in WebAudio in Google Chrome prior to 155.0.8059.39 allows remote attackers to execute arbitrary code within the sandbox via a crafted HTML page.
This flaw involves a use after free vulnerability in Network in Google Chrome prior to 155.0.8059.39, allowing remote attackers to potentially execute arbitrary code outside the sandbox via a crafted Chrome extension.
A use-after-free vulnerability in Chrome's Metrics component allows remote attackers with renderer process access to execute arbitrary code outside the sandbox, potentially leading to full system compromise.