Pisanbao

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 134.0.6998.35 **Description** The issue is an out of bounds read in the Media component, allowing a remote attacker to potentially access memory out of bounds via a crafted HTML page. The severity of this issue is classified as Medium. **Recommendations** For versions prior to 134.0.6998.35, update to version 134.0.6998.35 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 132.0.6834.83 Microsoft Edge (affected versions not specified) **Description** The issue is related to an out of bounds read in the Metrics component, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of this issue is considered High by Chromium. **Recommendations** For Google Chrome versions prior to 132.0.6834.83, update to version 132.0.6834.83 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 129.0.6668.89 Microsoft Edge (affected versions not specified) Description: The issue is related to insufficient data validation in Mojo, allowing a remote attacker who has compromised the renderer process to perform an out of bounds memory write via a crafted HTML page. This can lead to a denial of service. The severity of this issue is considered high. Recommendations: For Google Chrome versions prior to 129.0.6668.89, update to version 129.0.6668.89 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.