Ksw9722

A buffer overflow exists in PDFium, a PDF rendering engine, within Google Chrome on Windows. A remote attacker could use social engineering to trick a user into opening a specially crafted PDF file, potentially leading to arbitrary code execution inside the sandbox.

A security issue exists that allows attackers to affect the system.

A use after free issue exists in the PDF component. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

An authorization bypass exists in the Public API execution retry endpoint. The system incorrectly authorizes access using the `workflow:read` scope instead of the required `workflow:execute` scope. This allows an authenticated user who only has read-only access to a shared workflow to retry executions of that workflow, bypassing the permission boundary between read and execute access. This issue occurs in instances where workflows are shared across projects or with other users.

The software contains a flaw that allows an attacker to trigger server-side HEAD requests to arbitrary URLs. This occurs when the ObjectSecurityListener or EmbedSecurityListener option is enabled and embed or object tags are used with a src attribute lacking a file extension.