![]() Inappropriate implementation in in iframe Sandbox in Google Chrome prior to 1.74 allowed a remote attacker to bypass file download restrictions via a crafted HTML page. Inappropriate implementation in in Permission prompts in Google Chrome on Windows prior to 1.74 allowed a remote attacker to force acceptance of a permission prompt via a crafted HTML page. Inappropriate implementation in in Permission prompts in Google Chrome on Android prior to 1.74 allowed a remote attacker to bypass main origin permission delegation via a crafted HTML page. Use after free in Cart in Google Chrome prior to 1.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via database corruption and a crafted HTML page. Inappropriate implementation in in Fullscreen API in Google Chrome on Android prior to 1.74 allowed a remote attacker to execute incorrect security UI via a crafted HTML page. Heap buffer overflow in Platform Apps in Google Chrome on Chrome OS prior to 1.74 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page. Heap buffer overflow in libphonenumber in Google Chrome prior to 1.74 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Insufficient validation of untrusted input in Downloads in Google Chrome on Windows prior to 1.74 allowed a remote attacker to bypass download restrictions via a crafted HTML page. Inappropriate implementation in in File System API in Google Chrome on Windows prior to 1.74 allowed a remote attacker to bypass file system restrictions via a crafted HTML page. Insufficient policy enforcement in CORS in Google Chrome prior to 1.74 allowed a remote attacker to leak cross-origin data via a crafted HTML page. Use after free in WebTransport in Google Chrome prior to 1.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Use after free in WebRTC in Google Chrome prior to 1.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Type Confusion in ServiceWorker API in Google Chrome prior to 1.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. ![]() Use after free in GuestView in Google Chrome prior to 1.119 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a Chrome web app. If you want to see a complete summary for this CPE, please contact us. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. Archives
March 2023
Categories |