All CVEs — page 341 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
This flaw allows a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page, due to an out-of-bounds write in WebGL in Google Chrome prior to 154.0.8037.97.
This flaw in Google Chrome on Windows allows remote attackers to execute arbitrary code outside the sandbox via social engineering, leveraging a crafted HTML page.
A type confusion vulnerability in V8 of Google Chrome prior to 154.0.8037.97 could allow a remote attacker to execute arbitrary code within a sandboxed environment via a specially crafted HTML page.
This flaw involves a use-after-free vulnerability in Google Chrome's Contextual Tasks, allowing a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page.
The flaw is a use-after-free vulnerability in the MediaStream component of Google Chrome prior to version 154.0.8037.97, which allows remote attackers to execute arbitrary code within the sandbox via a crafted HTML page. This vulnerability is significant because it can lead to the execution of malicious code, compromising the security of the affected system.
This flaw involves a use after free vulnerability in SVG handling in Google Chrome prior to 154.0.8037.97, allowing remote attackers to execute arbitrary code within a sandboxed environment.
The Meari IoT Cloud Platform allows authenticated users to modify device configurations they don't own due to insufficient authorization checks. This authorization flaw enables attackers to manipulate unauthorized devices and potentially trigger unintended behaviors or settings changes.
This vulnerability allows an authenticated user with Duo Agent Platform access to escape the prompt template sandbox, leading to potential arbitrary command execution on the AI Gateway.
The flaw allows control characters in Git subtree URLs, enabling code execution during read-only actions like log/blame/annotate. This matters because it can lead to unauthorized code execution even when the repository is intended to be read-only.
The flaw in xdg-dbus-proxy versions before 0.1.9 allows attackers to bypass message filtering on the D-Bus session bus, leading to potential arbitrary code execution outside the sandbox.