Alo_Cook

An out-of-bounds read in Permissions allows a remote attacker who has compromised the renderer process to potentially execute arbitrary code outside the sandbox via a crafted HTML page. An out-of-bounds read occurs when a program reads data past the end of the intended buffer, which can lead to memory corruption or information disclosure.

Missing authorization in the BackgroundFetch component allows a remote attacker to bypass the web origin policy, which is a security mechanism that restricts how a document or script loaded from one origin can interact with a resource from another origin, by using a crafted HTML page.