A use-after-free flaw in the Input component of Google Chrome allows a remote attacker to execute arbitrary code inside the browser sandbox. The attacker needs a victim to open a crafted HTML page, for example via a phishing link or a compromised website. The CVE data does not describe a sandbox escape, so full system compromise would require an additional step. The CVSS base score is 8.8 (High).
Google · Chrome
A memory corruption flaw in the Canvas component of Google Chrome before 156.0.8078.47 can be triggered by a crafted HTML page. A remote attacker could potentially execute arbitrary code outside the Chrome sandbox. The attack requires that a user opens the malicious page; CISA SSVC rates exploitation as none and automatable as no.
Google · Chrome
The FileArtifactService of the Google ADK TypeScript library (@google/adk) versions 0.4.0 before 0.6.0 does not properly restrict the userId and sessionId parameters. A remote unauthenticated attacker can use crafted path traversal sequences to read files outside the artifact storage directory and, when an agent tool calls saveArtifact, write files there as well. The flaw applies only when the ADK API server is exposed and the non-default FileArtifactService is enabled; applications using the default InMemoryArtifactService are not affected.
Google · ADK TypeScript (@google/adk)
Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through 0.1.0-alpha.8 contain an insecure default policy and missing authorization in the MCP proxy and the OIDC enrollment flow. An attacker with any valid token from the configured OIDC provider can self-enroll into the mesh and invoke arbitrary tools on all connected MCP backend nodes, with read, write and execution access. The unauthenticated /info endpoint discloses the OIDC configuration needed to obtain such a token, so an externally reachable control plane is the main precondition.
Google · OSS Agent Mesh (SAM)
Google OSS Agent Mesh (SAM) versions 0.1.0-alpha.1 through 0.1.0-alpha.2 contain missing authentication and authorization checks in the /libp2p-http ingress server of sam-node. An unauthenticated remote libp2p peer can bypass Biscuit capability policy enforcement and invoke arbitrary registered backend services, including command-based MCP servers, A2A services and inference endpoints. The attack requires only that the ingress accepts a connection from the attacker's peer; no credentials are needed.
Google · OSS Agent Mesh (SAM)
A use-after-free flaw in the Prerender feature of Google Chrome allows a remote attacker to execute arbitrary code inside the browser sandbox. The attacker only needs to lure a user to a crafted HTML page, for example through a phishing link or a compromised website, and no authentication is required. The CVSS score is 8.8 (HIGH), and Google rates the issue Critical in Chromium. Full compromise would normally also require a sandbox escape, which is not described in the advisory.
Google · Chrome
A use-after-free flaw in the V8 JavaScript engine of Google Chrome allows a remote attacker to execute arbitrary code inside the browser sandbox. The attack requires a user to visit a crafted HTML page, so no login or internet-exposed service is needed. Google rates the issue High, and a full compromise of the system would still need a further sandbox escape, which is not described in the available sources.
Google · Chrome
Google Chrome versions prior to 155.0.8059.84 contain a memory corruption flaw in the V8 JavaScript engine (CWE-119). A remote attacker can use a crafted HTML page to execute arbitrary code inside the browser sandbox. The victim must open the malicious page, for example through a phishing link, and no privileges are required. Google rates the Chromium security severity as High, and NVD rates the CVSS score as 8.8.
Google · Chrome
A use-after-free vulnerability in the V8 JavaScript engine of Google Chrome allows a remote attacker to execute arbitrary code inside the browser sandbox. The attack requires that a user opens a crafted HTML page. NVD rates the issue 8.8 (High), and Google classifies it as High severity.
Google · Chrome
Research and translation in progress – available shortly.
Research and translation in progress – available shortly.
Improper input validation in the Desktop component of Google Chrome before 155.0.8059.84 allows a remote attacker to potentially execute arbitrary code outside the browser sandbox. The attacker needs a crafted HTML page, so a user must visit it, for example via a link in an email or a compromised website. Google rates the issue Medium in its own severity scale, while the NVD CVSS score is 9.6 (Critical).
Google · Chrome
Google Chrome for desktop contains a use-after-free flaw (CWE-416) in the Compositing component, which handles drawing of page content. A remote attacker can host or inject a crafted HTML page; when a user visits it, the attacker may execute arbitrary code inside the browser sandbox. The attack requires user interaction (opening the page) but no privileges.
Google · Chrome
Google Chrome versions before 155.0.8059.84 contain a memory corruption flaw in the Workers component (CWE-119). A remote attacker can potentially execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. The official record limits the impact to the sandbox; a full compromise would likely also need a sandbox escape, which is not documented.
Google · Chrome
Google Chrome before 155.0.8059.84 contains a memory corruption flaw in the DOM (CWE-119). A remote attacker can use a crafted HTML page to execute arbitrary code inside the browser sandbox. The attack requires that a user visits the malicious page. The vulnerability has a CVSS score of 8.8 (High) and Chromium rates it as High severity.
Google · Chrome
A use-after-free flaw in the Media component of Google Chrome allows a remote attacker to execute arbitrary code inside the browser sandbox. The attacker needs the victim to open a crafted HTML page, so the risk is drive-by exposure through web browsing or links. The CVSS score is 8.8 with high impact on confidentiality, integrity and availability; the sources do not say whether a sandbox escape is also needed for full compromise.
Google · Chrome
A use-after-free vulnerability in the Media component of Google Chrome before 155.0.8059.79 allows a remote attacker to execute arbitrary code inside the browser sandbox. Exploitation requires the victim to open a crafted HTML page, for example via a malicious link, email or compromised website. The CVSS score is 8.8 (High); the NVD and the vendor data agree on this rating.
Google · Chrome
Research and translation in progress – available shortly.
Google Chrome versions before 155.0.8059.79 contain a use-after-free vulnerability in the V8 JavaScript engine. A remote attacker can execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. Exploitation requires the user to visit the malicious page; a full compromise of the system would require an additional sandbox escape, which is not described in the record.
Google · Chrome
A use-after-free flaw in the V8 JavaScript engine of Google Chrome (CWE-416) lets a remote attacker execute arbitrary code inside the browser sandbox. The attacker needs the victim to open a crafted HTML page, so any web browsing or web-based mail can expose the flaw. The sources describe code execution in the renderer sandbox only; a separate sandbox escape would be needed for full system compromise, and none is described.
Google · Chrome
Google Chrome desktop versions before 155.0.8059.79 contain a use-after-free flaw (CWE-416) in the Media component. A remote attacker can execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. The victim must visit the page, and the NVD description does not report a sandbox escape. Google rates the Chromium security severity as High, and NVD lists a CVSS 3.1 base score of 8.8.
Google · Chrome
Google Chrome before 155.0.8059.79 contains a heap-based buffer overflow in its Animation component (CWE-122). A remote attacker can execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. The CVE record does not describe a sandbox escape, and Chromium rates the issue High.
Google · Chrome
A use-after-free flaw (CWE-416) in the Core component of Google Chrome on Android before 155.0.8059.79 can be exploited by a remote attacker. A crafted HTML page can potentially execute arbitrary code outside the browser sandbox. The NVD CVSS score is 9.6 (critical), and the vendor rates the Chromium security severity as Critical.
Google · Chrome
Google Chrome prior to 155.0.8059.79 contains a use-after-free flaw in the DOM component. A remote attacker can potentially execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. The attack requires the victim to visit the malicious page, and the CVSS score is 8.8 (High).
Google · Chrome
Google Chrome versions before 155.0.8059.79 contain a use-after-free vulnerability in the DOM component. A remote attacker can execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. Exploitation requires that the user visits the page, and a full compromise typically needs an additional sandbox escape that is not described.
Google · Chrome
