All CVEs — page 290 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The flaw involves incomplete cleanup in Google Chrome's Autofill feature on iOS versions prior to 155.0.8059.39, allowing a remote attacker to obtain sensitive information via a crafted HTML page.
A race condition in V8 of Google Chrome prior to 155.0.8059.39 allowed remote attackers to execute arbitrary code within the sandbox via a crafted HTML page, posing a significant security risk.
A use-after-free vulnerability in the Track feature of Google Chrome prior to 155.0.8059.39 allows remote attackers to execute arbitrary code within the sandbox via a crafted HTML page.
A permission bypass flaw in Google Chrome's Actor component on Android allows remote attackers to circumvent site isolation protections when they already control the renderer process. This could enable attackers to access data from other websites or tabs.
Chrome's FileSystem API lacked proper authorization checks, allowing a compromised renderer process to bypass web origin policies and access files from other origins. This creates a path for attackers to escalate privileges and potentially exfiltrate sensitive data.
This flaw involves a use after free vulnerability in Google Chrome prior to 155.0.8059.39, allowing remote attackers to execute arbitrary code outside the sandbox via a crafted HTML page, which poses a critical risk.
A missing authorization flaw in Google Chrome's navigation handling on iOS allowed remote attackers to bypass web origin policies and access privileged pages through crafted HTML content. This represents a significant security gap that could enable unauthorized access to sensitive web resources.
This flaw allows a remote attacker to bypass system access restrictions in Google Chrome on Mac versions prior to 155.0.8059.39 by sending crafted network traffic, leading to unauthorized access.
Chrome's WebAppInstalls feature had missing authorization checks that allowed attackers with compromised renderer processes to execute arbitrary code outside the sandbox via crafted HTML pages. This represents a privilege escalation vulnerability where attackers can bypass Chrome's security boundaries.
This flaw involves a use-after-free vulnerability in the Parser of Google Chrome prior to version 155.0.8059.39, allowing remote attackers to execute arbitrary code within a sandboxed environment.
A missing authorization check in Google Chrome's Actor component allowed attackers who already compromised the renderer process to execute arbitrary code outside the sandbox, potentially leading to full system compromise. This vulnerability acts as a privilege escalation vector from renderer to system-level access.
A use-after-free vulnerability in Google Chrome prior to 155.0.8059.39 allowed remote attackers to execute arbitrary code within the sandbox via a crafted HTML page, posing a significant security risk.
The flaw allows a local attacker to execute arbitrary code outside the sandbox by manipulating the search path in Google Chrome on Windows, potentially leading to full system compromise.