Gzobqq

**Nome do software vulnerável e versões afetadas** Versões do Google Chrome anteriores à 107.0.5304.106 **Descrição** O problema está relacionado a uma vulnerabilidade do tipo “use after free” no V8, permitindo que um invasor remoto possa explorar uma corrupção de heap por meio de uma página HTML maliciosa. Isso pode levar à execução de código arbitrário. A gravidade deste problema é considerada alta. **Recomendações** Para versões anteriores à 107.0.5304.106, atualize para a versão 107.0.5304.106 ou posterior para resolver o problema. Como solução temporária, considere restringir o acesso a páginas HTML potencialmente vulneráveis até que a atualização seja aplicada.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 50.0.2661.102 Opera (affected versions not specified) **Description** The issue is related to a race condition in the `ResourceDispatcherHostImpl::BeginRequest` function, which allows remote attackers to make arbitrary HTTP requests. This is achieved by leveraging access to a renderer process and reusing a request ID. **Recommendations** For Google Chrome versions prior to 50.0.2661.102, update to version 50.0.2661.102 or later to resolve the issue. For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 47.0.2526.73 Opera (affected versions not specified) **Description** The issue is related to a use-after-free vulnerability in the AppCache implementation. This allows remote attackers with renderer access to cause a denial of service or possibly have unspecified other impact by leveraging incorrect AppCacheUpdateJob behavior associated with duplicate cache selection. **Recommendations** For Google Chrome versions prior to 47.0.2526.73, update to version 47.0.2526.73 or later to resolve the issue. For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 43.0.2357.65 Opera (affected versions not specified) **Description** The issue is related to errors in handling pointers in the common/partial circular buffer.cc file of Google Chrome, which can be exploited by remote attackers to bypass the sandbox protection mechanism or cause a denial of service due to out-of-bounds write operations. This can be achieved by triggering a write operation with a large amount of data, utilizing the `PartialCircularBuffer::Write` and `PartialCircularBuffer::DoWrite` functions. **Recommendations** For Google Chrome versions prior to 43.0.2357.65, update to version 43.0.2357.65 or later to resolve the issue. For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 41.0.2272.76 Opera (affected versions not specified) **Description** The issue is related to an array index error in the `MidiManagerUsb::DispatchSendMidiData` function. This error can be triggered by providing an invalid port index, which leads to an out-of-bounds write operation. As a result, remote attackers can cause a denial of service or possibly have other unspecified impacts by leveraging renderer access. **Recommendations** For Google Chrome versions prior to 41.0.2272.76, update to version 41.0.2272.76 or later to resolve the issue. For Opera, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 62.0.3202.62 **Description** A memory corruption bug in WebAssembly could lead to out of bounds read and write through V8 in WebAssembly, allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. **Recommendations** For versions prior to 62.0.3202.62, update to version 62.0.3202.62 or later to resolve the issue.