CVE Vulnerability Advisory Database

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 152.0.7977.82

[Impact] A remote attacker can execute arbitrary code inside the browser's renderer sandbox by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (152.0.7977.82 or higher)

[Affected Scope] Desktop Window Manager (DWM) component within Microsoft Windows operating systems

[Impact] An authorized local attacker can exploit a type confusion vulnerability to elevate privileges to SYSTEM, enabling full system compromise

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and monitor endpoint process creation events for anomalous DWM behavior

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 142.0.7444.175

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code within the browser process via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (142.0.7444.175 or higher) and enforce automatic updates across the organization

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 140.0.7339.185

[Impact] Remote attackers can execute arbitrary code (RCE) and trigger heap corruption by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (140.0.7339.185 or higher)

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-6554

[Impact] Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML pa...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Windows operating systems and applications utilizing the Microsoft Scripting Engine

[Impact] Unauthorized remote attackers can execute arbitrary code and compromise system integrity via crafted web content or documents

[Mitigation] Immediately apply the official Microsoft security updates and restrict untrusted script execution policies

[Affected Scope] Google Chrome prior to 128.0.6613.84 and all affected Chromium-based browsers (e.g., Microsoft Edge)

[Impact] Remote attackers can trigger heap corruption and execute arbitrary code within the browser renderer process via a crafted HTML page

[Mitigation] Immediately update all Chromium-based browsers to the latest stable release (Chrome 128.0.6613.84 or higher)

[Affected Scope] Windows 10, 11, and Windows Server environments utilizing the legacy JScript9 engine, particularly with Internet Explorer mode enabled

[Impact] Remote Code Execution (RCE) and full system compromise via specially crafted malicious web pages

[Mitigation] Apply the Microsoft August 2024 security updates immediately and disable legacy IE scripting engines where applicable

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.112

[Impact] A remote attacker can execute arbitrary code inside the browser sandbox via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.112 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.60

[Impact] A remote attacker can execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.60 or higher)

[Affected Scope] Devices running Safari prior to 17.3, iOS/iPadOS 15.8.7/16.7.5/17.3, macOS Monterey/Ventura/Sonoma, tvOS, and visionOS

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) due to a type confusion issue, which has been actively exploited in the wild

[Mitigation] Immediately apply the official security updates and OS patches provided by Apple

[Affected Scope] Google Chrome and Chromium-based browsers (such as Microsoft Edge) prior to version 116.0.5845.179

[Impact] A remote attacker can execute arbitrary code and compromise the target system by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update your browser to the latest stable version (116.0.5845.179 or higher)

[Affected Scope] Systems running iOS/iPadOS prior to 16.5.1, iOS/iPadOS prior to 15.7.7, macOS Ventura prior to 13.4.1, and Safari prior to 16.5.1

[Impact] Processing maliciously crafted web content may lead to memory corruption, allowing remote attackers to execute arbitrary code on the target device

[Mitigation] Immediately apply the official software updates provided by Apple to patch the operating system and Safari browser

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 114.0.5735.110

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (114.0.5735.110 or higher) and enforce automatic update policies

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 112.0.5615.121

[Impact] Remote attackers can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution (RCE) within the browser process

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (112.0.5615.121 or higher)

[Affected Scope] Apple devices running iOS versions prior to 16.3.1, iPadOS versions prior to 16.3.1, macOS Ventura versions prior to 13.2.1, and Safari versions prior to 16.3

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE). This vulnerability has been actively exploited in the wild

[Mitigation] Immediately apply the official security updates provided by Apple to upgrade to patched versions

[Affected Scope] Apple WebKit engine in Safari prior to 16.2, tvOS prior to 16.2, macOS Ventura prior to 13.1, iOS prior to 15.7.2/16.1.2, and iPadOS prior to 15.7.2

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) on the target system, with active exploitation observed in the wild

[Mitigation] Immediately update affected Apple operating systems and Safari browsers to the latest patched versions (iOS 16.2, macOS 13.1, or later)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 108.0.5359.94

[Impact] A remote attacker can exploit heap corruption via a crafted HTML page, potentially leading to arbitrary code execution within the browser process

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (108.0.5359.94 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 107.0.5304.87

[Impact] A remote attacker can potentially exploit heap corruption via a crafted HTML page, leading to arbitrary remote code execution (RCE) within the browser renderer process

[Mitigation] Immediately update Google Chrome to the latest stable version (107.0.5304.87 or higher) and enforce automatic updates across enterprise environments

[Affected Scope] Multiple Windows operating system versions including Windows 7, 8.1, 10, 11, and Windows Server 2008, 2012, 2016, 2019, 2022

[Impact] A local authenticated attacker can exploit this vulnerability to execute arbitrary code with SYSTEM privileges, leading to complete system compromise

[Mitigation] Immediately apply the official cumulative security updates provided by Microsoft and restrict unnecessary local user accounts and privileges