Use after free in AdFilter in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Free of non-heap memory in Fonts in Google Chrome prior to 154.0.8037.57 allowed a remote attacker leveraging social engineering to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Integer overflow in Metrics in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially read memory outside the sandbox via a crafted HTML page. (Chromium security severity: Low)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Use after free in Browser in Google Chrome prior to 154.0.8037.57 allowed a local attacker to potentially execute arbitrary code outside the sandbox via UI Interaction. (Chromium security severity: High)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Type confusion in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Out of bounds write in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Use after free in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to read memory outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Type confusion in Bindings in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Buffer overflow in Tint in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Use after free in Platform in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Buffer overflow in ANGLE in Google Chrome on on Android prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Race condition in V8 in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Use after free in Views in Google Chrome prior to 154.0.8037.57 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Improper input validation in Themes in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code inside the sandbox via crafted network traffic. (Chromium security severity: Medium)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Improper output encoding in DevTools in Google Chrome prior to 154.0.8037.57 allowed a remote attacker who had compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP alert notification functionality. An authenticated attacker who can influence policy alert text can cause attacker-controlled data to be executed as operating system commands by the SNMP alerter service, which runs with root privileges.
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the certificate export CLI functionality, allowing a privileged authenticated CLI user to execute arbitrary commands with root privileges.
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI certificate SMIME recipient deletion functionality, allowing an authenticated privileged CLI user to execute arbitrary commands with root privileges.
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Information tampering, Protection mechanism bypass, and Unauthorized access.
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
