Amyb

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 151.0.7922.72 **Description** An out-of-bounds read in the V8 engine allows a remote attacker to execute arbitrary code within the sandbox by using a specially crafted HTML page. V8 is the open-source high-performance JavaScript and WebAssembly engine used in Google Chrome. **Recommendations** Update Google Chrome to version 151.0.7922.72 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome on Mac versions prior to 150.0.7871.47 **Description** An uninitialized use in ANGLE (Almost Native Graphics Layer Engine, a compatibility layer that allows OpenGL ES APIs to run on non-native platforms) allows a remote attacker to leak cross-origin data. This is achieved by inducing the browser to process a specially crafted HTML page. **Recommendations** Update Google Chrome on Mac to version 150.0.7871.47 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 150.0.7871.46 **Description** A type confusion issue exists in the V8 JavaScript engine, which can be triggered via a crafted HTML page. This flaw allows a remote attacker to execute arbitrary code within a sandbox. The issue stems from a Just-In-Time (JIT) compilation bug where sloppy mode breaks JIT assumptions. **Recommendations** Update Google Chrome to version 150.0.7871.46 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 150.0.7871.46 **Description** A type confusion issue exists in Tint, which could allow a remote attacker to perform a sandbox escape by inducing the browser to process a specially crafted HTML page. Type confusion occurs when a program accesses a resource using a different type than intended, potentially leading to memory corruption or unauthorized code execution. **Recommendations** Update Google Chrome to version 150.0.7871.46 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 148.0.7778.216 **Description** An out-of-bounds write exists in the V8 JavaScript engine, which is the component responsible for compiling and executing JavaScript code. This issue stems from a JIT (Just-In-Time) loop optimization bug, where the engine optimizes code during execution to improve performance. A remote attacker can exploit this by using a crafted HTML page to execute arbitrary code within a sandbox. **Recommendations** Update to version 148.0.7778.216 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 150.0.7871.46 **Description** An uninitialized use in ANGLE allows a remote attacker who has already compromised the renderer process to potentially perform a sandbox escape by using a crafted HTML page. A sandbox escape is a technique used to break out of a restricted environment to gain unauthorized access to the rest of the system. **Recommendations** Update Google Chrome to version 150.0.7871.46 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 150.0.7871.47 **Description** An uninitialized use in Dawn, a WebGPU implementation, allows a remote attacker to potentially cause heap corruption by inducing the browser to process a crafted HTML page. Heap corruption occurs when a program modifies memory in a way that corrupts the heap, which is the region of memory used for dynamic allocation. **Recommendations** Update Google Chrome to version 150.0.7871.47 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 148.0.7778.216 **Description** An out of bounds write occurs in the GPU, which allows a remote attacker who has already compromised the renderer process to potentially achieve a sandbox escape by using a specially crafted HTML page. **Recommendations** Update to version 148.0.7778.216 or later.