Ggwhyp

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 148.0.7778.216 **Description** A type confusion issue exists in V8, the JavaScript and WebAssembly engine. This allows an attacker to execute arbitrary code within a sandbox if a user is convinced to install a malicious Chrome Extension. **Recommendations** Update to version 148.0.7778.216 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 148.0.7778.216 **Description** A type confusion issue exists in Skia, a graphics library. This allows a remote attacker to execute arbitrary code within a sandbox by inducing the user to open a specially crafted HTML page. Type confusion occurs when a program accesses a resource using a type that is different from the type it was originally allocated. **Recommendations** Update to version 148.0.7778.216 or later.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 150.0.3 **Description** Incorrect boundary conditions exist in the Just-In-Time (JIT) component of the JavaScript Engine. JIT is a compilation method that improves performance by compiling bytecode into native machine code at runtime. **Recommendations** Update to version 150.0.3.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 150.0.3 **Description** JIT miscompilation occurs within the JIT component of the JavaScript Engine. JIT (Just-In-Time) compilation is a method used to improve the execution speed of programs by compiling code during runtime rather than before execution. **Recommendations** Update to version 150.0.3.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 150.0.3 **Description** An issue exists within the JavaScript Engine component.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 150.0.3 Firefox ESR versions prior to 115.36 Firefox ESR versions prior to 140.11 **Description** A sandbox escape exists in the Profile Backup component. A sandbox is a security mechanism for separating running programs, ensuring that code in a sandbox cannot access resources outside of it. **Recommendations** Update to version 150.0.3. Update to ESR version 115.36. Update to ESR version 140.11.