Zhanjia Song

**Nome do software vulnerável e versões afetadas** Versões do Google Chrome anteriores à 90.0.4430.212 **Descrição** O problema está relacionado a um estouro de buffer de heap no componente Histórico do Google Chrome, que pode ser explorado por um invasor remoto que tenha comprometido o processo do renderizador. Isso pode ser feito por meio de uma página HTML maliciosa, permitindo potencialmente que o invasor explore a corrupção do heap. A vulnerabilidade pode permitir que o invasor acesse dados confidenciais, comprometa a integridade dos dados e cause uma negação de serviço. **Recomendações** Para versões anteriores à 90.0.4430.212, atualize para a versão 90.0.4430.212 ou posterior para resolver o problema.

**Nome do software vulnerável e versões afetadas** Versões do Google Chrome anteriores à 83.0.4103.61 **Descrição** O problema está relacionado ao uso de memória após sua liberação na implementação da tecnologia WebRTC no Google Chrome. Isso poderia permitir que um invasor remoto acessasse dados confidenciais, comprometesse sua integridade e causasse uma negação de serviço por meio de uma página HTML especialmente criada. A exploração pode levar à corrupção da pilha (heap). **Recomendações** Para versões anteriores à 83.0.4103.61, atualize para a versão 83.0.4103.61 ou posterior para resolver o problema. Como solução temporária, considere restringir o acesso à funcionalidade WebRTC até que a atualização seja aplicada.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 70 Thunderbird versions prior to 68.2 Firefox ESR versions prior to 68.2 **Description** The issue is related to a use-after-free error that occurs when following the value's prototype chain, allowing a reference to a locale to be retained, deleted, and then referenced again, resulting in a potentially exploitable crash. This could potentially allow a remote attacker to access confidential data, compromise its integrity, and cause a denial of service. **Recommendations** For Firefox versions prior to 70, update to version 70 or later. For Thunderbird versions prior to 68.2, update to version 68.2 or later. For Firefox ESR versions prior to 68.2, update to version 68.2 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 69 Thunderbird versions prior to 68.1 Thunderbird versions prior to 60.9 Firefox ESR versions prior to 60.9 Firefox ESR versions prior to 68.1 **Description** The issue is related to a component of IndexedDB in web browsers, specifically affecting Firefox, Firefox ESR, and the Thunderbird email client. It involves an error in key deletion, which can lead to a use-after-free condition and a potentially exploitable crash. This could allow a remote attacker to access confidential data, compromise data integrity, and cause a denial of service. **Recommendations** For Firefox versions prior to 69, update to version 69 or later. For Thunderbird versions prior to 68.1, update to version 68.1 or later. For Thunderbird versions prior to 60.9, update to version 60.9 or later. For Firefox ESR versions prior to 60.9, update to version 60.9 or later. For Firefox ESR versions prior to 68.1, update to version 68.1 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 62 Firefox ESR versions prior to 60.2 Thunderbird versions prior to 60.2.1 **Description** A use-after-free issue can occur when an IndexedDB index is deleted while still in use by JavaScript code, resulting in a potentially exploitable crash. This issue may allow a remote attacker to execute arbitrary code or cause the application to crash. **Recommendations** For Firefox versions prior to 62, update to version 62 or later to resolve the issue. For Firefox ESR versions prior to 60.2, update to version 60.2 or later to resolve the issue. For Thunderbird versions prior to 60.2.1, update to version 60.2.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 66.0.3359.117 Opera versions prior to 66.0.3359.117 **Description** The issue is related to an integer overflow that leads to a heap buffer-overflow in Skia, allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. **Recommendations** For Google Chrome versions prior to 66.0.3359.117, update to version 66.0.3359.117 or later. For Opera versions prior to 66.0.3359.117, update to version 66.0.3359.117 or later.