Leecraso

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 119.0.6045.199 Microsoft Edge versions (affected versions not specified) **Description** The issue is related to a use after free vulnerability in the Mojo IPC library, which can be exploited by a remote attacker to potentially impact the confidentiality, integrity, and availability of protected information. This can be achieved via a crafted HTML page, allowing for heap corruption. **Recommendations** For Google Chrome versions prior to 119.0.6045.199, update to version 119.0.6045.199 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 108.0.5359.71 **Description** The issue allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This is due to a use after free in Camera Capture. **Recommendations** For versions prior to 108.0.5359.71, update to version 108.0.5359.71 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 98.0.4758.80 **Description** The issue is related to a use after free in the Thumbnail Tab Strip component, which can be exploited by a remote attacker using a crafted HTML page to potentially corrupt the heap. This could allow the attacker to bypass existing security restrictions. **Recommendations** For versions prior to 98.0.4758.80, update to version 98.0.4758.80 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 100.0.4896.60 **Description** The issue is related to a heap buffer overflow in the WebUI of Google Chrome, which can be exploited by a remote attacker through specific user interaction and input into DevTools, potentially leading to heap corruption. This can be achieved by convincing a user to engage with specially crafted content, such as a web page designed to exploit this weakness. The exploitation may allow the attacker to execute arbitrary code. **Recommendations** For Google Chrome versions prior to 100.0.4896.60, update to version 100.0.4896.60 or later to resolve the issue. As a temporary workaround, consider restricting access to DevTools or avoiding specific user interactions that could trigger the heap buffer overflow until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 100.0.4896.88 **Description** The issue is related to a use after free in storage, which could allow an attacker to potentially perform a sandbox escape via a crafted Chrome Extension if a user is convinced to install a malicious extension. This could be achieved by exploiting the vulnerability with a specially crafted web page, allowing a remote attacker to execute arbitrary code. **Recommendations** For Google Chrome versions prior to 100.0.4896.88, update to version 100.0.4896.88 or later to resolve the issue. As a temporary workaround, consider disabling the installation of extensions from untrusted sources to minimize the risk of exploitation. Restrict access to the `storage` module to minimize the risk of exploitation until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 100.0.4896.60 **Description** The issue is related to a use after free in the WebUI of Google Chrome, which can be exploited by a remote attacker who convinces a user to engage in specific user interaction, potentially leading to heap corruption via specific input into DevTools. This can allow an attacker to gain unauthorized access to protected information using a specially crafted web page. **Recommendations** For Google Chrome versions prior to 100.0.4896.60, update to version 100.0.4896.60 or later to resolve the issue. As a temporary workaround, consider restricting the use of DevTools until a patch is available. Avoid using specific input into DevTools that could potentially exploit heap corruption.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 100.0.4896.60 Microsoft Edge (affected versions not specified) **Description** The issue is related to a heap buffer overflow in the WebUI of Google Chrome and Microsoft Edge, which can be exploited by a remote attacker through specific user interaction and input into DevTools, potentially leading to heap corruption. An attacker could exploit this issue using a specially crafted web page to execute arbitrary code. **Recommendations** For Google Chrome versions prior to 100.0.4896.60, update to version 100.0.4896.60 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the DevTools feature until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 96.0.4664.93 Microsoft Edge (affected versions not specified) **Description** The issue is related to a heap buffer overflow in the BFCache component, which can be exploited by a remote attacker who has compromised the renderer process. This can potentially lead to heap corruption via a crafted HTML page. The exploitation of this issue may allow a remote attacker to execute arbitrary code or cause a denial of service. **Recommendations** For Google Chrome versions prior to 96.0.4664.93, update to version 96.0.4664.93 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Bluetrum AB5301A (affected versions not specified) **Description** The Bluetooth Classic implementation does not properly handle the reception of oversized DM1 LMP packets while no other BT connections are active, allowing attackers in radio range to prevent new BT connections via a crafted LMP packet. This can disable the AB5301A inquiry and page scan procedures. The issue is related to a buffer overflow in memory. To restore BT connectivity, the user needs to manually perform a power cycle (restart) of the device. **Recommendations** For Bluetrum AB5301A devices, as a temporary workaround, consider restarting the device manually to restore BT connectivity after an attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 92.0.4515.107 **Description** The issue is related to a use after free in protocol handling, which can be exploited by a remote attacker to potentially cause heap corruption via a crafted HTML page. This could allow the attacker to cause a denial of service or execute arbitrary code by opening a specially crafted malicious web page. **Recommendations** For Google Chrome versions prior to 92.0.4515.107, update to version 92.0.4515.107 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 92.0.4515.107 **Description** The issue is related to an out of bounds write in the Autofill function of Google Chrome, which can be exploited by a remote attacker to potentially gain unauthorized access to protected information. This can be achieved by opening a specially crafted malicious web page, allowing the attacker to compromise the renderer process and exploit heap corruption. **Recommendations** For versions prior to 92.0.4515.107, update to version 92.0.4515.107 or later to resolve the issue. As a temporary workaround, consider restricting access to the Autofill function until a patch is available. Avoid using the Autofill feature in sensitive contexts until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 92.0.4515.107 **Description** The issue is related to a stack buffer overflow in the printing function of Google Chrome, which could allow a remote attacker who has compromised the renderer process to potentially exploit stack corruption via a crafted HTML page. This could lead to a denial of service or the execution of arbitrary code. **Recommendations** For versions prior to 92.0.4515.107, update to version 92.0.4515.107 or later to resolve the issue. As a temporary workaround, consider disabling the printing function in Google Chrome until a patch is available. Restrict access to crafted HTML pages to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 92.0.4515.159 **Description** The issue is related to a use after free error in the printing function of Google Chrome, which can lead to heap corruption. This can be exploited by a remote attacker using a specially crafted HTML page, potentially allowing the execution of arbitrary code. **Recommendations** For versions prior to 92.0.4515.159, update to version 92.0.4515.159 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious websites to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 92.0.4515.131 Microsoft Edge (affected versions not specified) **Description** The issue is related to a heap buffer overflow in the Bookmarks element when processing untrusted HTML content. This could allow a remote attacker to potentially exploit heap corruption via a specially crafted HTML page. **Recommendations** For Google Chrome versions prior to 92.0.4515.131, update to version 92.0.4515.131 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 90.0.4430.212 **Description** The issue is related to a heap buffer overflow in the Media Feeds component of Google Chrome, which can be exploited by an attacker who convinces a user to enable certain features in Chrome. This can potentially lead to heap corruption via a crafted HTML page, allowing the attacker to access confidential data, compromise its integrity, and cause a denial of service. **Recommendations** For Google Chrome versions prior to 90.0.4430.212, update to version 90.0.4430.212 or later to resolve the issue. As a temporary workaround, consider disabling the Media Feeds feature in Chrome until a patch is available. Restrict access to crafted HTML pages to minimize the risk of exploitation.

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 89.0.4389.114 Description: The issue is related to a use after free in screen sharing, which can lead to heap corruption. A remote attacker can potentially exploit this via a crafted HTML page, allowing them to execute arbitrary code or cause a denial of service. Recommendations: For versions prior to 89.0.4389.114, update to version 89.0.4389.114 or later to resolve the issue. As a temporary workaround, consider disabling the screen sharing feature until a patch is available. Restrict access to crafted HTML pages to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 88.0.4324.146 **Description** The issue is related to a heap buffer overflow in the Tab Groups component of Google Chrome. This could allow an attacker, who has convinced a user to install a malicious extension, to potentially exploit heap corruption via a crafted Chrome Extension. The exploitation of this issue may impact the confidentiality, integrity, and availability of protected information. **Recommendations** For versions prior to 88.0.4324.146, update to version 88.0.4324.146 or later to resolve the issue. As a temporary workaround, consider disabling the use of Tab Groups until a patch is available. Restrict the installation of extensions to only trusted sources to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 88.0.4324.96 **Description** The issue is related to a use after free in the Omnibox feature of Google Chrome on Linux, which could allow a remote attacker to potentially perform a sandbox escape via a crafted HTML page. This could enable the attacker to execute arbitrary code. **Recommendations** For versions prior to 88.0.4324.96, update to version 88.0.4324.96 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted HTML pages that could trigger the use after free vulnerability in the Omnibox feature.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 87.0.4280.141 **Description** The issue is related to a use after free in drag and drop functionality, potentially allowing a remote attacker who has compromised the renderer process to perform a sandbox escape via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information. **Recommendations** For versions prior to 87.0.4280.141, update to version 87.0.4280.141 or later to resolve the issue. As a temporary workaround, consider restricting the use of drag and drop functionality in Google Chrome on Linux until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 87.0.4280.141 **Description** The issue is related to the use of memory after it has been freed, which could allow a remote attacker who has compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information. **Recommendations** For versions prior to 87.0.4280.141, update to version 87.0.4280.141 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable media components in Google Chrome until a patch is applied.