Jake Corina

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 83.0.4103.61 **Description** The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could enable the attacker to access confidential data, compromise data integrity, and cause a denial of service. **Recommendations** For versions prior to 83.0.4103.61, update to version 83.0.4103.61 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious HTML pages to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Huawei Honor 8 smartphone versions earlier than FRD-L04C567B389 Huawei Honor 8 smartphone versions earlier than FRD-L14C567B389 **Description** The issue is related to improper authorization configuration on specific device information, leading to a permission control problem. **Recommendations** For versions earlier than FRD-L04C567B389, update to a version later than FRD-L04C567B389. For versions earlier than FRD-L14C567B389, update to a version later than FRD-L14C567B389.

**Name of the Vulnerable Software and Affected Versions** Android kernel **Description** The issue is related to an elevation of privilege vulnerability in the MediaTek kernel, affecting Android products. **Recommendations** For Android kernel, apply the fix referenced by Android ID: A-36232120 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Android (affected versions not specified) **Description** The issue is related to an elevation of privilege vulnerability in the MediaTek command queue driver. It could allow a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. The vulnerability is associated with insufficient access control in the MediaTek driver. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.