Luke Francis

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to arbitrary code execution.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process termination.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process termination.

A remote attacker may be able to break out of the Web Content sandbox, which is a security mechanism used to isolate web page processes from the rest of the system.

A use-after-free issue, which occurs when a program continues to use a pointer after it has been freed, was addressed with improved memory management. Processing maliciously crafted web content may lead to an unexpected process crash.

Improved input validation was implemented to address a flaw where a malicious website could process restricted web content outside the sandbox. A sandbox is a security mechanism for separating running programs from one another and from the system.**

Processing maliciously crafted web content may disclose sensitive user information.

Insufficient data validation in the Media component of Google Chrome could allow a remote attacker to perform an out-of-bounds memory read using a crafted video file. Exploitation may lead to a denial-of-service.

An out-of-bounds read issue existed in the Media component of Google Chrome. This allowed a remote attacker to potentially read memory outside of the intended boundaries by tricking a user into visiting a specially crafted HTML page. The security severity is considered high.