CVE Vulnerability Advisory Database

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 124.0.6367.201

[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a crafted HTML page to escape the browser sandbox and execute arbitrary code

[Mitigation] Immediately update Google Chrome to the latest stable version (124.0.6367.201 or higher) and enforce auto-update policies across the enterprise

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 120.0.6099.224

[Impact] A remote attacker can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) or sensitive information disclosure within the browser renderer process

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (120.0.6099.224 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 120.0.6099.129

[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE)

[Mitigation] Immediately update Google Chrome to the latest stable version (120.0.6099.129 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 119.0.6045.199

[Impact] A remote attacker who has compromised the renderer process can exploit this vulnerability via a malicious file to escape the browser sandbox and execute arbitrary code

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable channel (119.0.6045.199 or higher)

[Affected Scope] Google Chrome versions prior to 117.0.5938.132 and libvpx versions prior to 1.13.1.

[Impact] A remote attacker can trigger heap corruption via a crafted HTML page, potentially leading to arbitrary remote code execution (RCE).

[Mitigation] Immediately update Google Chrome to the latest version and upgrade the libvpx library dependency to v1.13.1 or higher in all environments.

[Affected Scope] Google Chrome prior to 116.0.5845.187 and libwebp library prior to 1.3.2

[Impact] A remote attacker can trigger an out-of-bounds memory write and potentially execute arbitrary code via a crafted HTML page containing a malicious WebP image

[Mitigation] Immediately update Google Chrome to version 116.0.5845.187 or higher, and upgrade libwebp dependency to 1.3.2 or above

[Affected Scope] Google Chrome and Chromium-based browsers (such as Microsoft Edge) prior to version 116.0.5845.179

[Impact] A remote attacker can execute arbitrary code and compromise the target system by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update your browser to the latest stable version (116.0.5845.179 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 114.0.5735.110

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (114.0.5735.110 or higher) and enforce automatic update policies

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 112.0.5615.137

[Impact] A remote attacker who has compromised the renderer process can potentially perform a sandbox escape and execute arbitrary code via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (112.0.5615.137 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 112.0.5615.121

[Impact] Remote attackers can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) within the browser process

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (112.0.5615.121 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 108.0.5359.94

[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution within the browser process

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (108.0.5359.94 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 107.0.5304.121

[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (107.0.5304.121 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 107.0.5304.87

[Impact] A remote attacker can potentially exploit heap corruption via a crafted HTML page, leading to arbitrary remote code execution (RCE) within the browser renderer process

[Mitigation] Immediately update Google Chrome to the latest stable version (107.0.5304.87 or higher) and enforce automatic updates across enterprise environments

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 105.0.5195.102

[Impact] A remote attacker who has compromised the renderer process can bypass the browser sandbox and potentially execute arbitrary code on the host system via crafted Mojo IPC messages

[Mitigation] Immediately update Google Chrome and all Chromium-based browsers to version 105.0.5195.102 or later

[Affected Scope] Google Chrome browser versions prior to 105.0.5195.52

[Impact] A remote attacker can potentially exploit heap corruption and execute arbitrary code via a crafted HTML page targeting the Network Service

[Mitigation] Immediately upgrade Google Chrome to the latest stable version (105.0.5195.52 or higher) and enforce auto-updates via enterprise group policies

[Affected Scope] Google Chrome on Android prior to version 104.0.5112.101

[Impact] Remote attackers can force arbitrary browsing to malicious websites via crafted HTML pages exploiting insufficient Intent validation

[Mitigation] Immediately update Google Chrome on Android to version 104.0.5112.101 or later

[Affected Scope] Google Chrome prior to version 103.0.5060.114 and other applications utilizing the WebRTC library

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code or cause a Denial of Service (DoS) via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to version 103.0.5060.114 or later

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 100.0.4896.127

[Impact] A remote attacker can exploit heap corruption via a crafted HTML page to execute arbitrary code within the browser process context

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (100.0.4896.127 or higher)

[Affected Scope] Google Chrome versions prior to 99.0.4844.84 and all affected Chromium-based browsers (Edge, Brave, Opera, etc.)

[Impact] A remote attacker can exploit heap corruption via a specially crafted HTML page, potentially leading to arbitrary code execution (RCE) within the browser process context

[Mitigation] Immediately update all Chromium-based browsers to the latest stable release (Chrome 99.0.4844.84 or higher)

[Affected Scope] Google Chrome users on desktop platforms prior to version 98.0.4758.102

[Impact] A remote attacker can exploit heap corruption and potentially execute arbitrary code by enticing a user to visit a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (98.0.4758.102 or higher)