CVE Vulnerability Advisory Database

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 152.0.7977.82

[Impact] A remote attacker can execute arbitrary code inside the browser's renderer sandbox by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (152.0.7977.82 or higher)

[Affected Scope] Desktop Window Manager (DWM) component within Microsoft Windows operating systems

[Impact] An authorized local attacker can exploit a type confusion vulnerability to elevate privileges to SYSTEM, enabling full system compromise

[Mitigation] Apply the latest Microsoft cumulative security updates immediately and monitor endpoint process creation events for anomalous DWM behavior

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 142.0.7444.175

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code within the browser process via a crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (142.0.7444.175 or higher) and enforce automatic updates across the organization

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 140.0.7339.185

[Impact] Remote attackers can execute arbitrary code (RCE) and trigger heap corruption by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (140.0.7339.185 or higher)

[Affected Scope] Systems running unpatched versions impacted by CVE-2025-6554

[Impact] Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML pa...

[Mitigation] Apply vendor security patches and restrict external network exposure.

[Affected Scope] Windows operating systems and applications utilizing the Microsoft Scripting Engine

[Impact] Unauthorized remote attackers can execute arbitrary code and compromise system integrity via crafted web content or documents

[Mitigation] Immediately apply the official Microsoft security updates and restrict untrusted script execution policies

[Affected Scope] Google Chrome prior to 128.0.6613.84 and all affected Chromium-based browsers (e.g., Microsoft Edge)

[Impact] Remote attackers can trigger heap corruption and execute arbitrary code within the browser renderer process via a crafted HTML page

[Mitigation] Immediately update all Chromium-based browsers to the latest stable release (Chrome 128.0.6613.84 or higher)

[Affected Scope] Windows 10, 11, and Windows Server environments utilizing the legacy JScript9 engine, particularly with Internet Explorer mode enabled

[Impact] Remote Code Execution (RCE) and full system compromise via specially crafted malicious web pages

[Mitigation] Apply the Microsoft August 2024 security updates immediately and disable legacy IE scripting engines where applicable

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.112

[Impact] A remote attacker can execute arbitrary code inside the browser sandbox via a crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.112 or higher)

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 125.0.6422.60

[Impact] A remote attacker can execute arbitrary code within the browser sandbox by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome and Chromium-based browsers to the latest stable version (125.0.6422.60 or higher)

[Affected Scope] Devices running Safari prior to 17.3, iOS/iPadOS 15.8.7/16.7.5/17.3, macOS Monterey/Ventura/Sonoma, tvOS, and visionOS

[Impact] Processing maliciously crafted web content may lead to arbitrary code execution (RCE) due to a type confusion issue, which has been actively exploited in the wild

[Mitigation] Immediately apply the official security updates and OS patches provided by Apple

[Affected Scope] Google Chrome and Chromium-based browsers (such as Microsoft Edge) prior to version 116.0.5845.179

[Impact] A remote attacker can execute arbitrary code and compromise the target system by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update your browser to the latest stable version (116.0.5845.179 or higher)

[Affected Scope] Systems running iOS/iPadOS prior to 16.5.1, iOS/iPadOS prior to 15.7.7, macOS Ventura prior to 13.4.1, and Safari prior to 16.5.1

[Impact] Processing maliciously crafted web content may lead to memory corruption, allowing remote attackers to execute arbitrary code on the target device

[Mitigation] Immediately apply the official software updates provided by Apple to patch the operating system and Safari browser

[Affected Scope] Google Chrome and Chromium-based browsers prior to version 114.0.5735.110

[Impact] A remote attacker can trigger heap corruption and potentially execute arbitrary code by enticing a user to visit a specially crafted HTML page

[Mitigation] Immediately update Google Chrome to the latest stable version (114.0.5735.110 or higher) and enforce automatic update policies