A cross-site scripting flaw in the auth handler of Google Cloud Identity Platform and Firebase Authentication allows an unauthenticated remote attacker to run arbitrary JavaScript. The attacker uses a malicious iOS bundle ID, and a user must be tricked into opening a crafted page or link. Google has patched the issue for all users, so no app updates are required, but applications that self-host the Firebase helper code must re-synchronize it.
Google · Firebase Authentication
A use-after-free vulnerability (CWE-416) in the Input component of Google Chrome allows a remote attacker to execute arbitrary code inside the browser sandbox. The attacker must lure a user to a crafted HTML page; no login is required. Chromium rates the issue High (CVSS 8.8), and the CVE text limits code execution to the sandbox, so a separate sandbox escape would be needed for full system control.
Google · Chrome
Google Chrome versions before 156.0.8078.79 contain a memory corruption flaw in the FileSystem component (CWE-119). A remote attacker can use a crafted HTML page to potentially execute arbitrary code inside the browser sandbox. The attack requires that a user opens the malicious page, for example via a phishing link.
Google · Chrome
Google Chrome versions before 156.0.8078.79 contain a memory corruption flaw (CWE-119) in the Network component. A remote attacker can use a crafted HTML page to potentially execute arbitrary code inside the browser sandbox. The attack requires that a user opens the malicious page, for example via a phishing link or a compromised website.
Google · Chrome
Google Chrome prior to 156.0.8078.79 contains a use-after-free vulnerability in the FileSystem component (CWE-416). A remote attacker can execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. Exploitation requires user interaction, such as visiting the page, and the impact is limited to the sandbox unless it is chained with a sandbox escape.
Google · Chrome
Research and translation in progress – available shortly.
Memory corruption in the Autofill feature of Google Chrome before 156.0.8078.79 can be abused by a remote attacker to execute arbitrary code inside the browser sandbox. The attack requires that a user visits a crafted HTML page, for example through a phishing link or a compromised website. Chromium rates the flaw as High severity, and CVSS 3.1 is 8.8.
Google · Chrome
Google Chrome before 156.0.8078.79 contains a use-after-free flaw in its FileSystem component (CWE-416). A remote attacker can execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. The vendor rates the issue High; no user interaction beyond visiting the page is needed, and no authentication is required.
Google · Chrome
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
A use-after-free flaw in Skia, the graphics library used for rendering in Google Chrome, allows a remote attacker to execute arbitrary code inside the browser sandbox. Exploitation requires that a user visits a crafted HTML page, for example via phishing or a compromised website. The CVSS base score is 8.8 (High).
Google · Chrome
Google Chrome versions before 156.0.8078.79 contain an improper input validation flaw in the CacheStorage component. A remote attacker can potentially execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. No login is required, but the victim must open the page.
Google · Chrome
A use-after-free flaw in the Blink rendering engine of Google Chrome before 156.0.8078.79 allows a remote attacker to execute arbitrary code inside the browser sandbox. The attacker needs the victim to open a crafted HTML page (user interaction required) and no prior privileges. Exploitation of the sandbox alone does not give full system control, and the sources describe no sandbox escape.
Google · Chrome
Google Chrome before 156.0.8078.79 contains an integer overflow (CWE-190) in its Editing component, which handles rich-text editing. A remote attacker can use a crafted HTML page to potentially execute arbitrary code inside the browser sandbox. The victim must open the malicious page, but no login is required. Full compromise would normally need a further sandbox escape, which the sources do not describe.
Google · Chrome
Google Chrome before 156.0.8078.79 contains a memory corruption flaw in its DOM handling. A remote attacker can use a crafted HTML page to potentially execute arbitrary code inside the browser sandbox. The attack requires that a user visits the malicious page, for example via phishing or a compromised website.
Google · Chrome
A use-after-free vulnerability in the Quota component of Google Chrome before 156.0.8078.79 can be triggered by a crafted HTML page. A remote attacker may be able to execute arbitrary code inside the browser sandbox. The attack requires that a user visits the malicious page; no authentication is needed. Chromium rates the flaw as High severity.
Google · Chrome
Google Chrome before 156.0.8078.79 contains a memory corruption flaw in the Quota component. A remote attacker can use a crafted HTML page to potentially execute arbitrary code inside the browser sandbox. The attack requires a user to visit the malicious page, and the sandbox limits the impact; full system compromise would generally need a further sandbox escape.
Google · Chrome
Google Chrome versions before 156.0.8078.79 contain a memory corruption flaw in Dawn, Chromium's WebGPU implementation. A remote attacker can potentially execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. Exploitation requires the user to visit the malicious page; the CVSS base score is 8.8 (High).
Google · Chrome
Google Chrome versions before 156.0.8078.79 contain a memory corruption flaw in the GarbageCollection component (CWE-119). A remote attacker can potentially execute arbitrary code outside the browser sandbox by luring a user to a crafted HTML page. The attack needs no authentication, but the victim must visit the page, and Chrome rates the issue High (the NVD score of 9.6 is not yet confirmed). Any SME workstation running an affected Chrome build is exposed.
Google · Chrome
Improper input validation in the V8 JavaScript engine of Google Chrome before 156.0.8078.79 can be abused by a remote attacker to potentially execute arbitrary code inside the browser sandbox. The attacker needs a user to visit a crafted HTML page, for example via a phishing link or a compromised website. According to the CNA, the impact is limited to the sandbox; full system compromise would normally require an additional sandbox escape.
Google · Chrome
Google Chrome prior to 156.0.8078.79 contains an improper input validation flaw in the Skia graphics library. A remote attacker can craft an HTML page that could potentially execute arbitrary code outside the browser sandbox. The attack requires that a user visits the crafted page, and no authentication is needed.
Google · Chrome
Google Chrome versions before 156.0.8078.79 contain a use-after-free flaw in the Frames component. A remote attacker can use a crafted HTML page to execute arbitrary code inside the browser sandbox. The attack requires a user to visit the malicious page, for example through a link in a phishing email.
Google · Chrome
A memory corruption flaw in the V8 JavaScript engine of Google Chrome before 156.0.8078.73 can be triggered by a crafted HTML page. A remote attacker may potentially execute arbitrary code inside the browser sandbox. Exploitation requires that a user loads the malicious page, for example through a link or phishing. NVD rates it CVSS 8.8, and no in-the-wild exploitation is known as of the latest data.
Google · Chrome
Google Chrome before 156.0.8078.73 contains a memory corruption flaw in the WebAudio component. A remote attacker can potentially execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. The attack requires that the victim opens the malicious page; no login is needed.
Google · Chrome
Google Chrome versions before 156.0.8078.73 contain a use-after-free flaw in the FileSystem API. A remote attacker can use a crafted HTML page to potentially execute arbitrary code inside the browser sandbox. Exploitation requires that a user loads the malicious page, and the sources do not say whether a further sandbox escape is needed.
Google · Chrome
