Triplepwns

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 105.0.5195.125 **Description** The issue is related to a use after free in the PDF component, allowing a remote attacker to potentially exploit heap corruption via a crafted PDF file. This could impact the confidentiality, integrity, and availability of protected information. **Recommendations** For Google Chrome versions prior to 105.0.5195.125, update to version 105.0.5195.125 or later to resolve the issue. As a temporary workaround, consider avoiding the use of PDF files from untrusted sources until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 105.0.5195.125 **Description** The issue is related to a use after free vulnerability in the PDFium component of Google Chrome, which can be exploited by a remote attacker using a specially crafted PDF file. This could potentially lead to heap corruption, affecting the confidentiality, integrity, and availability of protected information. **Recommendations** For versions prior to 105.0.5195.125, update to version 105.0.5195.125 or later to resolve the issue. As a temporary workaround, consider avoiding the use of PDF files from untrusted sources until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 103.0.5060.134 Microsoft Edge (affected versions not specified) **Description** The issue is related to a use after free vulnerability in the PDF content handler of the browsers, which can lead to heap corruption. A remote attacker can potentially exploit this issue via a crafted HTML page, allowing them to execute arbitrary code. **Recommendations** For Google Chrome versions prior to 103.0.5060.134, update to version 103.0.5060.134 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.