Ggwhyp

A type confusion issue exists in V8, the JavaScript and WebAssembly engine. This allows an attacker to execute arbitrary code within a sandbox if a user is convinced to install a malicious Chrome Extension.

A type confusion issue exists in Skia, a graphics library. This allows a remote attacker to execute arbitrary code within a sandbox by inducing the user to open a specially crafted HTML page. Type confusion occurs when a program accesses a resource using a type that is different from the type it was originally allocated.

Incorrect boundary conditions exist in the Just-In-Time (JIT) component of the JavaScript Engine. JIT is a compilation method that improves performance by compiling bytecode into native machine code at runtime.

JIT miscompilation occurs within the JIT component of the JavaScript Engine. JIT (Just-In-Time) compilation is a method used to improve the execution speed of programs by compiling code during runtime rather than before execution.

An issue exists within the JavaScript Engine component.

A sandbox escape exists in the Profile Backup component. A sandbox is a security mechanism for separating running programs, ensuring that code in a sandbox cannot access resources outside of it.