Bruno Keith

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 89.0.4389.128 **Description** The issue is related to insufficient validation of untrusted input in the V8 engine of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to unauthorized access to confidential information or cause a denial of service. The vulnerability has been reportedly exploited by actors such as Water Labbu in Electron-based applications, particularly targeting the financial industry. **Recommendations** For Google Chrome versions prior to 89.0.4389.128, update to version 89.0.4389.128 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable API endpoints or disabling the use of untrusted input in the V8 engine until a patch is applied. Avoid using crafted HTML pages that could exploit the heap corruption vulnerability.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 78 **Description** The issue is related to a one-byte out of bounds read that could occur due to confusion when processing a hyphen character in Date.parse(), potentially leading to information disclosure. This is a result of a buffer overflow in memory, which could allow a remote attacker to gain unauthorized access to protected information. **Recommendations** For Firefox versions prior to 78, update to version 78 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft browsers (affected versions not specified) **Description** A remote code execution issue exists due to the way Microsoft browsers access objects in memory. This could allow an attacker to execute arbitrary code in the context of the current user. If the current user has administrative rights, the attacker could gain control of the system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge ChakraCore (affected versions not specified) **Description** The issue is related to errors in handling objects in memory by the ChakraCore scripting engine. This could allow a remote attacker to execute arbitrary code, potentially gaining the same user rights as the current user. If the current user has administrative rights, the attacker could take control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (affected versions not specified) **Description** The issue exists due to errors in handling objects in memory by the ChakraCore JavaScript engine. This could allow a remote attacker to execute arbitrary code, potentially gaining the same user rights as the current user. If the current user has administrative rights, the attacker could take control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Thunderbird versions prior to 60.6 Firefox ESR versions prior to 60.6 Firefox versions prior to 66 **Description** A mechanism was discovered that removes some bounds checking for string, array, or typed array accesses if Spectre mitigations have been disabled. This could allow an attacker to create an arbitrary value in compiled JavaScript, for which the range analysis will infer a fully controlled, incorrect range in circumstances where users have explicitly disabled Spectre mitigations. The vulnerability is related to reading data beyond buffer memory boundaries, which may allow a remote attacker to gain unauthorized access to protected data. **Recommendations** For Thunderbird versions prior to 60.6, update to version 60.6 or later. For Firefox ESR versions prior to 60.6, update to version 60.6 or later. For Firefox versions prior to 66, update to version 66 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 12 Apple macOS versions prior to 10.14 Apple tvOS versions prior to 12 Apple watchOS versions prior to 5 **Description** An out-of-bounds read issue was addressed with improved bounds checking. **Recommendations** For Apple iOS versions prior to 12, update to iOS 12 or later. For Apple macOS versions prior to 10.14, update to macOS Mojave 10.14 or later. For Apple tvOS versions prior to 12, update to tvOS 12 or later. For Apple watchOS versions prior to 5, update to watchOS 5 or later.

**Name of the Vulnerable Software and Affected Versions** Apple iOS versions prior to 12 Apple macOS versions prior to 10.14 Apple tvOS versions prior to 12 Apple watchOS versions prior to 5 Apple iTunes for Windows versions prior to 12.9 Apple iCloud for Windows versions prior to 7.7 **Description** A memory corruption issue was addressed with improved memory handling. **Recommendations** For Apple iOS versions prior to 12, update to iOS 12 or later. For Apple macOS versions prior to 10.14, update to macOS 10.14 or later. For Apple tvOS versions prior to 12, update to tvOS 12 or later. For Apple watchOS versions prior to 5, update to watchOS 5 or later. For Apple iTunes for Windows versions prior to 12.9, update to iTunes 12.9 or later. For Apple iCloud for Windows versions prior to 7.7, update to iCloud for Windows 7.7 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox ESR versions prior to 60.2.2 Firefox versions prior to 62.0.3 **Description** The issue is related to the JavaScript JIT compiler inlining Array.prototype.push with multiple arguments, resulting in the stack pointer being off by 8 bytes after a bailout. This can leak a memory address to the calling function, potentially used as part of an exploit inside the sandboxed content process. The vulnerability is also described as being related to insufficient input validation in the implementation of the Array.prototype.push method in Firefox and Firefox ESR browsers, which could allow a remote attacker to execute arbitrary code. **Recommendations** For Firefox ESR versions prior to 60.2.2, update to version 60.2.2 or later. For Firefox versions prior to 62.0.3, update to version 62.0.3 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 62.0.3 Firefox ESR versions prior to 60.2.2 **Description** A vulnerability in register allocation in JavaScript can lead to type confusion, allowing for an arbitrary read and write. This leads to remote code execution inside the sandboxed content process when triggered. The issue is related to errors in data type conversion. **Recommendations** For Firefox versions prior to 62.0.3, update to version 62.0.3 or later to resolve the issue. For Firefox ESR versions prior to 60.2.2, update to version 60.2.2 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Microsoft Edge (affected versions not specified) **Description** The issue is related to a remote code execution problem in the Chakra scripting engine, which can lead to memory corruption. This allows an attacker to execute arbitrary code in the context of the current user by using a specially crafted web page. If the current user has administrative rights, the attacker could gain control of the affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.