All CVEs — page 289 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
A confused deputy vulnerability in Google Lens allowed attackers who compromised the renderer process to execute arbitrary code outside the sandbox, potentially leading to full system compromise. This affects Chrome versions prior to 155.0.8059.39.
This flaw involves a use after free vulnerability in Google Chrome prior to 155.0.8059.39, allowing remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page. This is a critical issue due to the high severity and potential for remote code execution.
A missing authorization flaw in Google Chrome's Autofill feature before 155.0.8059.39 allows remote attackers to obtain sensitive information via a crafted HTML page, leveraging social engineering.
A confused deputy vulnerability in Chrome's WebAPK implementation on Android allows remote attackers to bypass web origin policies through social engineering. This occurs when the system incorrectly delegates authority from one entity to another, enabling crafted HTML pages to manipulate the browser's security context.
A flaw in Google Chrome prior to 155.0.8059.39 allows remote attackers to leak sensitive information via a crafted HTML page, posing a high risk due to the potential exposure of passwords and other sensitive data.
This flaw in Google Chrome prior to 155.0.8059.39 allows remote attackers to obtain sensitive information via social engineering, making it a significant security risk.
This flaw involves a use-after-free vulnerability in the TabStrip component of Google Chrome prior to version 155.0.8059.39, allowing remote attackers to execute arbitrary code via a crafted HTML page.
A race condition flaw in V8 of Google Chrome prior to 155.0.8059.39 allows remote attackers to execute arbitrary code within the sandbox via a crafted HTML page, posing a significant security risk.
A missing authorization flaw in Google Chrome's password management on Android allowed remote attackers to bypass site isolation when they already had compromised a renderer process, potentially enabling them to access password data from other sites. This represents a privilege escalation vulnerability that could lead to credential theft.
This flaw involves a use-after-free vulnerability in the PDF handling of Google Chrome prior to version 155.0.8059.39, allowing remote attackers to execute arbitrary code within the sandbox.