CVE Vulnerability Advisory Database

[Affected Scope] Google Chrome prior to version 86.0.4240.198 (specifically the V8 JavaScript engine component)

[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable channel version (86.0.4240.198 or higher)

[Affected Scope] Google Chrome for Android prior to version 86.0.4240.185

[Impact] A remote attacker who has compromised the renderer process can trigger a heap buffer overflow in the UI component via a crafted HTML page, potentially leading to a complete sandbox escape and arbitrary code execution on the target device

[Mitigation] Immediately update Google Chrome for Android to version 86.0.4240.185 or later via the Google Play Store

[Affected Scope] Google Chrome versions prior to 86.0.4240.183 utilizing the V8 JavaScript engine

[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a specially crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (86.0.4240.183 or higher) across all endpoints

[Affected Scope] Google Chrome versions prior to 86.0.4240.111 and FreeType library versions prior to 2.10.4

[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a specially crafted HTML page or font file

[Mitigation] Immediately upgrade Google Chrome to version 86.0.4240.111 or later, and update the FreeType library to version 2.10.4 or higher

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 80.0.3987.122, and runtime environments utilizing the V8 engine

[Impact] Remote attackers can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary remote code execution (RCE) on the target system

[Mitigation] Immediately update Google Chrome to the latest stable version (80.0.3987.122 or higher) and apply system package updates for V8 dependencies

[Affected Scope] Google Chrome prior to version 73.0.3683.86

[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution within the browser renderer process

[Mitigation] Immediately update Google Chrome to the latest stable version (73.0.3683.86 or higher)

[Affected Scope] Google Chrome prior to version 78.0.3904.87

[Impact] A remote attacker can exploit heap corruption via a crafted HTML page to execute arbitrary code on the target system

[Mitigation] Immediately update Google Chrome to the latest stable version (78.0.3904.87 or higher)

[Affected Scope] Google Chrome versions prior to 72.0.3626.121

[Impact] Remote attackers can potentially execute arbitrary code or cause a denial of service (DoS) via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (72.0.3626.121 or higher)

[Affected Scope] Google Chrome prior to version 71.0.3578.80

[Impact] Remote attackers can execute arbitrary code inside the browser sandbox by enticing a user to visit a specially crafted HTML page.

[Mitigation] Immediately update Google Chrome to the latest stable version (71.0.3578.80 or higher) across all enterprise endpoints.

[Affected Scope] Google Chrome versions prior to 65.0.3325.146 and applications utilizing affected V8 JavaScript engine releases

[Impact] Remote attackers can trigger heap corruption and potentially execute arbitrary code via a specially crafted HTML page

[Mitigation] Immediately upgrade Google Chrome to the latest stable channel (65.0.3325.146 or higher) and apply OS-level package updates

[Affected Scope] Google Chrome versions prior to 70.0.3538.64 and applications utilizing vulnerable V8 engine releases

[Impact] Remote attackers can execute arbitrary code within the browser renderer sandbox by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (70.0.3538.64 or higher) and rebuild V8-dependent frameworks

[Affected Scope] Google Chrome prior to 59.0.3071.86 for Linux, Windows, and macOS, and prior to 59.0.3071.92 for Android

[Impact] A remote attacker can execute arbitrary code within the Chrome renderer sandbox by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (59.0.3071.86 or higher) and enforce automatic updates across the enterprise

[Affected Scope] Google Chrome prior to 57.0.2987.98 for desktop (Windows, macOS, Linux) and prior to 57.0.2987.108 for Android

[Impact] Successful exploitation allows remote attackers to execute arbitrary code within the context of the browser renderer process or bypass sandbox boundaries via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable channel release (57.0.2987.98 / 108 or higher)

[Affected Scope] Google Chrome V8 engine prior to 54.0.2840.90 for Linux, 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac

[Impact] Remote attackers can perform arbitrary memory read/write operations and execute arbitrary code via a specially crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (54.0.2840.90/87/85 or higher depending on the OS platform)

[Affected Scope] Google Chrome browser versions prior to 49.0.2623.108 and applications utilizing vulnerable V8 JavaScript engine releases

[Impact] Remote attackers can trigger a denial of service (browser crash) or potentially execute arbitrary code via crafted JavaScript payloads that exploit memory corruption

[Mitigation] Immediately update Google Chrome to the latest stable channel (49.0.2623.108 or higher) and patch any V8-dependent runtime environments