Bkth

The issue is related to insufficient validation of untrusted input in the V8 engine of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to unauthorized access to confidential information or cause a denial of service. The vulnerability has been reportedly exploited by actors such as Water Labbu in Electron-based applications, particularly targeting the financial industry.

The issue is related to a memory corruption vulnerability in the Chakra Scripting Engine, which can be exploited by an attacker to gain access to protected information. This vulnerability is associated with a buffer overflow. There is no information provided about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

A validation issue was addressed with improved input sanitization, allowing an application to potentially read restricted memory.

The issue is related to insufficient handling of objects in memory by the JavaScript ChakraCore engine in Microsoft Edge. This could allow a remote attacker to corrupt memory and execute arbitrary code using a specially crafted web page. Successful exploitation could grant the attacker the same user rights as the current user, potentially leading to control of the affected system if the user has administrative rights. This could enable the attacker to install programs, view, change, or delete data, or create new accounts with full user rights.

A memory corruption issue was addressed with improved memory handling.

An out-of-bounds read issue was addressed with improved bounds checking.

The issue is related to multiple memory corruption problems that were addressed with improved memory handling.