Rong

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 113.0.5672.63 **Description** The issue is related to an inappropriate implementation in Prompts in Google Chrome, which allowed a remote attacker to bypass permission restrictions via a crafted HTML page. This could be achieved by exploiting a security check flaw for standard elements, enabling the attacker to circumvent security limitations. **Recommendations** For versions prior to 113.0.5672.63, update to version 113.0.5672.63 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted HTML pages that could exploit the vulnerability in Prompts until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 112.0.5615.137 **Description** The issue is related to an out of bounds memory access in the Service Worker API of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This could potentially lead to heap corruption and allow the attacker to execute arbitrary code. **Recommendations** For versions prior to 112.0.5615.137, update to version 112.0.5615.137 or later to resolve the issue. As a temporary workaround, consider restricting access to the Service Worker API until a patch is applied. Avoid using the Service Worker API in sensitive operations until the issue is resolved.