Manfp

An integer overflow was addressed with improved input validation. Processing maliciously crafted web content may lead to arbitrary code execution. A remote attacker may be able to access confidential data, compromise its integrity, and cause a denial of service.

توجد مشكلة في المصادقة غير الصحيحة حيث يمكن للمهاجم الذي لديه قدرة على القراءة والكتابة التعسفية تجاوز مصادقة المؤشر (Pointer Authentication)، وهي آلية أمنية تُستخدم لحماية سلامة المؤشرات في الذاكرة. تم استغلال هذه الثغرة بنشاط في الواقع لتسليم برمجيات خبيثة لسرقة المعلومات، خاصة باستهداف الأجهزة التي لم يتم تحديثها.

The issue allows UI spoofing when visiting a website that frames malicious content. This can lead to potential security risks.

The issue is related to a type confusion in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker to execute arbitrary code inside a sandbox. This can be achieved via a crafted HTML page.

The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This can be achieved by exploiting errors in data type mixing.

The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue is related to a buffer overflow in memory, allowing an attacker to execute arbitrary code in the context of the kernel.