A use-after-free vulnerability in the Internals component of Google Chrome before 156.0.8078.47 allows a remote attacker to execute arbitrary code outside the Chrome sandbox. The attacker only needs to lure a user to a crafted HTML page, and no login is required. NVD rates it 9.6 (critical), while Google rates it Medium; plan for the higher score on internet-facing endpoints.
Google · Chrome
Google Chrome contains a memory corruption flaw in its BrowserTag component (CWE-119). A remote attacker can create a crafted HTML page that may execute arbitrary code inside the browser sandbox if a user opens it. Exploitation requires user interaction, such as visiting a malicious link. Chromium rates the issue Low, and no exploitation has been reported.
Google · Chrome
Chrome on iOS contains a memory corruption flaw in the Navigation component, which handles page loading and movement between pages. A remote attacker can use a crafted HTML page to execute arbitrary code inside the browser sandbox. The attack requires that a user visits the malicious page. Chromium rates the issue Low, and CVSS v3.1 is 8.8.
Google · Chrome
A memory corruption flaw in the Video component of Google Chrome before 156.0.8078.47 may allow a remote attacker to execute arbitrary code inside the browser sandbox. The attack requires that a user opens a crafted HTML page, for example via a link in an email or an advertisement. The CVE record does not describe a sandbox escape. Chromium rates the issue Medium, and the CVSS base score of 8.8 comes from the input data and could not be confirmed on NVD.
Google · Chrome
Google Chrome for Android contains a memory corruption flaw in ANGLE, Chrome's graphics translation layer. A remote attacker can potentially execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. The attack requires that the user visits the page, and no privileges are needed.
Google · Chrome
Google Chrome desktop builds before 156.0.8078.47 contain a memory corruption flaw in BFCache, Chrome's back/forward page cache. A remote attacker can use a crafted HTML page to potentially execute arbitrary code inside the browser sandbox. Exploitation requires a user to visit the page (UI:R), and the impact is limited to the sandbox, so a sandbox escape would be needed for full compromise. The NVD status and CVSS score (8.8 in the record) could not be confirmed and should be checked before use in reports.
Google · Chrome
Google Chrome for desktop contains an improper input validation flaw in the Extensions component. A remote attacker can potentially execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. Google rates the severity as Medium, while the CVSS base score is 8.8; a second flaw would normally be needed to escape the sandbox for full system compromise (analyst assessment).
Google · Chrome
A use-after-free flaw in the Core component of Google Chrome on Android allows a remote attacker to potentially execute arbitrary code outside the browser sandbox. The attack is triggered when a user opens a crafted HTML page, so no authentication is needed but user interaction is. Chromium rates the issue Medium, while the CVSS score of 9.6 reflects the assumed scope change and full impact of a sandbox escape.
Google · Chrome
A use-after-free flaw in the Extensions component of Google Chrome allows a remote attacker to potentially execute arbitrary code inside the browser sandbox. The attack requires that a victim visits a crafted HTML page. Sandbox-only execution does not by itself give full control of the system, and the sources do not describe a sandbox escape.
Google · Chrome
Google Chrome desktop builds before 156.0.8078.47 contain a use-after-free flaw in the WebAppInstalls component, which handles Progressive Web App installation. A remote attacker can potentially execute arbitrary code outside the browser sandbox by luring a user to a crafted HTML page. Exploitation requires user interaction, such as opening the page, but no authentication. NVD rates the issue CVSS 9.6 (critical), while Google rates it Medium.
Google · Chrome
Google Chrome versions prior to 156.0.8078.47 contain a memory corruption flaw in the Core component (CWE-119). A remote attacker can potentially execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. Exploitation requires that the victim opens the page, and Google rates the Chromium severity as Low; a full compromise would normally also require a sandbox escape.
Google · Chrome
A use-after-free vulnerability in the Frames component of Google Chrome allows a remote attacker to execute arbitrary code inside the browser sandbox. The attacker needs a victim to open a crafted HTML page, so user interaction is required. Chromium rates the issue Medium, and the CVSS 3.1 score in the request is 8.8. Full compromise would normally also require a sandbox escape, which is not described in the sources.
Google · Chrome
A memory corruption flaw (CWE-119) in the Chromoting component of Google Chrome before 156.0.8078.47 can be triggered by a crafted HTML page. A remote attacker could potentially execute arbitrary code inside the browser sandbox. The attack requires a user to open the malicious page, but no authentication. Full system compromise would normally need a second flaw to escape the sandbox.
Google · Chrome
A memory corruption flaw in the Media component of Google Chrome allows a remote attacker to potentially execute arbitrary code inside the browser sandbox. Exploitation requires that a user opens a crafted HTML page, for example via an email link or a website. Chromium rates the issue Medium, and the public information does not describe a sandbox escape.
Google · Chrome
Google Chrome versions before 156.0.8078.47 contain a use-after-free flaw (CWE-416) in the Permissions component. A remote attacker can execute arbitrary code inside the browser sandbox by luring a user to a crafted HTML page. Exploitation requires that the victim opens the page; the flaw alone does not escape the sandbox.
Google · Chrome
A use-after-free vulnerability in the CustomTabs component of Google Chrome for Android allows a remote attacker to execute arbitrary code inside the browser sandbox. Exploitation requires a victim to open a crafted HTML page, for example via a link in an email, a message or an app that opens web pages through Custom Tabs. The impact is limited to the sandbox, so full device compromise would require additional flaws. The CVSS 3.1 base score is 8.8 (High); Chromium rates the issue Medium.
Google · Chrome
Memory corruption in the DevTools component of Google Chrome before 156.0.8078.47 can be exploited by a remote attacker. A crafted HTML page can potentially execute arbitrary code inside the browser sandbox. The attack requires the user to visit the malicious page, and no exploitation has been reported.
Google · Chrome
A use-after-free vulnerability (CWE-416) in the Canvas component of Google Chrome before 156.0.8078.47 allows a remote attacker to execute arbitrary code inside the browser sandbox. The attacker needs a victim to open a crafted HTML page, and no privileges are required. The CVSS scope is unchanged, so the flaw alone stays inside the sandbox; a further sandbox escape would be needed for full system compromise.
Google · Chrome
Improper input validation in ANGLE, the graphics component of Google Chrome on Windows, affects Chrome versions prior to 156.0.8078.47. A remote attacker can craft an HTML page that may execute arbitrary code outside the browser sandbox. The attack requires that a victim opens the malicious page, for example via a phishing link, advertisement or compromised website.
Google · Chrome
Google Chrome on desktop contains a use-after-free flaw in its PDF component (CWE-416). A remote attacker can use a crafted HTML page to execute arbitrary code inside the browser sandbox. The attack requires that a user opens the malicious page (UI:R) and does not require any privileges. Full compromise would normally also need a sandbox escape, which is not described in the CVE record.
Google · Chrome
Google Chrome contains a use-after-free flaw in ANGLE, its graphics abstraction layer. A remote attacker can use a crafted HTML page to potentially execute arbitrary code inside the browser sandbox. The victim only needs to open the page, and no login is required. Google rates the issue Medium severity, and the sandbox limits the impact on its own.
Google · Chrome
Improper input validation in the Mobile component of Google Chrome for iOS (prior to 156.0.8078.47) can be abused by a remote attacker via a crafted HTML page. According to the NVD record, an attacker could potentially execute arbitrary code inside the sandbox. The attack requires that a user visits the malicious page, for example via a link in email, chat or an advertisement, and needs no prior authentication.
Google · Chrome
Google Chrome versions before 156.0.8078.47 contain a memory corruption flaw in the FileSystem component. A remote attacker can lure a user to a crafted HTML page and potentially execute arbitrary code inside the browser sandbox. User interaction is required, and the sources do not describe a sandbox escape.
Google · Chrome
A memory corruption flaw in the DevTools component of Google Chrome allows a remote attacker to execute arbitrary code inside the browser sandbox. The attack is triggered by a crafted HTML page that a user must open. Sandbox-only code execution usually needs to be chained with a second flaw to fully compromise a system, but the impact is rated high for confidentiality, integrity and availability (CVSS 3.1 8.8).
Google · Chrome
Research and translation in progress – available shortly.
