Jorian Woltjer

**Name of the Vulnerable Software and Affected Versions** Joomla! Core (affected versions not specified) **Description** Lack of escaping in modalreturn layouts of various components allows for Cross-Site Scripting (XSS), a technique where malicious scripts are injected into trusted websites. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla! Core (affected versions not specified) **Description** An improper access check in the `com contact` component allows a user to download vCard exports of contacts that should be inaccessible. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla! Core (affected versions not specified) **Description** Insufficient validation in the MFA management views allows for Cross-Site Scripting (XSS), a technique where malicious scripts are injected into trusted websites. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Joomla! Core (affected versions not specified) **Description** Lack of escaping in the file management view of the `com templates` component leads to a Cross-Site Scripting (XSS) issue. XSS is a flaw that allows an attacker to inject malicious scripts into web pages viewed by other users. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 150.0.7871.46 **Description** A heap buffer overflow exists in ANGLE, a graphics abstraction layer, within Google Chrome on Mac. This issue allows a remote attacker to perform out-of-bounds memory access by inducing the browser to process a specially crafted HTML page. **Recommendations** Update Google Chrome to version 150.0.7871.46 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome on Mac versions prior to 150.0.7871.47 **Description** An out-of-bounds read exists in ANGLE, a graphics abstraction layer. A remote attacker who has already compromised the renderer process can use a specially crafted HTML page to read potentially sensitive information from the process memory. **Recommendations** Update Google Chrome on Mac to version 150.0.7871.47 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome on Android versions prior to 148.0.7778.168 **Description** Insufficient policy enforcement in Payments allows a remote attacker to bypass discretionary access control, which is a mechanism that restricts access to objects based on the identity of users or groups, by using a crafted HTML page. **Recommendations** Update to version 148.0.7778.168 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 150.0.7871.47 **Description** A side-channel information leakage issue exists in the Scroll component. This flaw allows a remote attacker to leak cross-origin data, which is data belonging to a different origin than the one serving the malicious page, by using a specially crafted HTML page. **Recommendations** Update Google Chrome to version 150.0.7871.47 or later.