Manfp

An integer overflow was addressed with improved input validation. Processing maliciously crafted web content may lead to arbitrary code execution. A remote attacker may be able to access confidential data, compromise its integrity, and cause a denial of service.

An improper authentication issue exists where an attacker with arbitrary read and write capability may be able to bypass Pointer Authentication, a security mechanism used to protect the integrity of pointers in memory. This flaw has been actively exploited in the wild to deliver information-stealing malware, particularly targeting unpatched devices.

The issue allows UI spoofing when visiting a website that frames malicious content. This can lead to potential security risks.

The issue is related to a type confusion in the V8 JavaScript engine of Google Chrome, which can be exploited by a remote attacker to execute arbitrary code inside a sandbox. This can be achieved via a crafted HTML page.

The issue is related to a type confusion in the V8 JavaScript engine, allowing a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. This can be achieved by exploiting errors in data type mixing.

The eBPF ALU32 bounds tracking for bitwise ops (AND, OR and XOR) in the Linux kernel did not properly update 32-bit bounds, which could be turned into out of bounds reads and writes in the Linux kernel and therefore, arbitrary code execution. This issue is related to a buffer overflow in memory, allowing an attacker to execute arbitrary code in the context of the kernel.