Mark Brand

**Name of the Vulnerable Software and Affected Versions** AMD EPYC 7001 Processors (affected versions not specified) **Description** An out of bounds memory write when processing the AMD PSP1 Configuration Block (APCB) could allow an attacker with access to modify the BIOS image and potentially modify the APCB block, resulting in arbitrary code execution. This issue affects the AMD EPYC 7001 Processors. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 119.0.6045.199 Microsoft Edge (affected versions not specified) **Description** The issue is related to a type confusion in the spellcheck service of Google Chrome and Microsoft Edge, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information. The estimated number of potentially affected devices is not specified. **Recommendations** For Google Chrome versions prior to 119.0.6045.199, update to version 119.0.6045.199 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 116.0.5845.96 **Description** The issue is related to a heap buffer overflow in the Skia graphics library of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page. This could potentially allow the attacker to execute arbitrary code, especially if the renderer process has been compromised. **Recommendations** For versions prior to 116.0.5845.96, update to version 116.0.5845.96 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 116 Firefox ESR versions prior to 102.14 Firefox ESR versions prior to 115.1 **Description** The issue is related to an untrusted input stream being copied to a stack buffer without checking its size, resulting in a potentially exploitable crash that could lead to a sandbox escape. This could allow a remote attacker to bypass security restrictions and cause a denial of service. The vulnerability is also associated with a buffer overflow error in the StorageManager of Mozilla Firefox, Firefox ESR, and Thunderbird, which could allow a remote attacker to execute arbitrary code on the target system by tricking the victim into opening a specially crafted website. **Recommendations** For Firefox versions prior to 116, update to version 116 or later. For Firefox ESR versions prior to 102.14, update to version 102.14 or later. For Firefox ESR versions prior to 115.1, update to version 115.1 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 115.0.5790.98 **Description** The issue is related to an out of bounds memory access in the Mojo library of Google Chrome, which can potentially allow a remote attacker to exploit heap corruption via a crafted HTML page. This could enable the attacker to execute arbitrary code. The attacker must have compromised the renderer process to potentially exploit this issue. **Recommendations** For versions prior to 115.0.5790.98, update to version 115.0.5790.98 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 115.0.5790.98 **Description** The issue is related to an inappropriate implementation in the Skia graphics library of Google Chrome, which can be exploited by a remote attacker to potentially perform a sandbox escape. This can be achieved via a crafted HTML page, assuming the renderer process has been compromised. **Recommendations** For versions prior to 115.0.5790.98, update to version 115.0.5790.98 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 114.0.5735.90 **Description** The issue is related to an out of bounds memory access in Mojo, a component of Google Chrome, which could allow a remote attacker to exploit heap corruption via a crafted HTML page. This could potentially lead to a denial of service or the execution of arbitrary code. **Recommendations** For versions prior to 114.0.5735.90, update to version 114.0.5735.90 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted HTML pages until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 111.0.5563.110 **Description** The issue is related to an out of bounds read in the GPU Video component, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to unauthorized access to protected information. **Recommendations** For versions prior to 111.0.5563.110, update to version 111.0.5563.110 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 111.0.5563.110 **Description** The issue is related to an out of bounds read in the ANGLE library of Google Chrome, which can be exploited by a remote attacker to potentially gain unauthorized access to protected information via a specially crafted HTML page. This can lead to heap corruption if the renderer process is compromised. **Recommendations** For versions prior to 111.0.5563.110, update to version 111.0.5563.110 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.

**Name of the Vulnerable Software and Affected Versions** AMD Secure Processor (ASP) (affected versions not specified) **Description** The issue is related to insufficient input validation in the SYS KEY DERIVE system call, which can be exploited by an attacker to corrupt AMD Secure Processor (ASP) OS memory, potentially leading to arbitrary code execution. This can occur in a compromised user application or ABL. The vulnerability is associated with the implementation of AMD Secure Processor (ASP) microcode in AMD processors. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** AMD processors (affected versions not specified) **Description** The issue is related to insufficient input validation in the implementation of the SNP INIT command for the AMD processor firmware loading mode. This could allow a remote attacker to compromise the integrity of protected information. Additionally, failure to verify the CPU execution mode during SNP INIT may lead to potential memory integrity loss for SNP guests. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 103.0.5060.53 **Description** The issue is related to a use after free in Core, which can potentially allow a remote attacker to exploit heap corruption via a crafted HTML page. This could lead to arbitrary code execution. The vulnerability is associated with the use of memory after it has been freed, specifically in the base component of Google Chrome and Microsoft Edge browsers. **Recommendations** For Google Chrome versions prior to 103.0.5060.53, update to version 103.0.5060.53 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted HTML pages until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 102.0.5005.115 Microsoft Edge (affected versions not specified) **Description** The issue is related to an out of bounds read in the compositing component of Google Chrome and Microsoft Edge, which can be exploited by a remote attacker who has compromised the renderer process. This could potentially allow the attacker to perform a sandbox escape via a crafted HTML page. **Recommendations** For Google Chrome versions prior to 102.0.5005.115, update to version 102.0.5005.115 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** System Management Unit (SMU) (affected versions not specified) **Description** The issue is related to insufficient DRAM address validation, which may lead to a denial of service due to DMA read/write operations from/to invalid DRAM addresses. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** The issue is related to the failure to flush the Translation Lookaside Buffer (TLB) of the I/O memory management unit (IOMMU), which may allow an IO device to write to memory it should not be able to access. This could result in a potential loss of integrity. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned. **Description** The issue is related to the failure to assign a new report ID to an imported guest, which may potentially result in an SEV-SNP guest VM being tricked into trusting a dishonest Migration Agent (MA). **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned. **Description** A bug related to the SEV-ES TMR may cause a potential loss of memory integrity for SNP-active VMs. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 101.0.4951.41 Microsoft Edge (affected versions not specified) **Description** The issue is caused by a heap buffer overflow in the WebGPU API, which can be exploited by a remote attacker who has compromised the renderer process. This can potentially lead to heap corruption via a crafted HTML page. **Recommendations** For Google Chrome versions prior to 101.0.4951.41, update to version 101.0.4951.41 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 103.0.5060.53 **Description** The issue is related to a heap buffer overflow in the WebGL component of Google Chrome, which could be exploited by a remote attacker via a crafted HTML page, potentially leading to heap corruption. This could result in a denial of service or allow the execution of arbitrary code. **Recommendations** For versions prior to 103.0.5060.53, update to version 103.0.5060.53 or later to resolve the issue. As a temporary workaround, consider restricting access to WebGL functionality until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 97.0.4692.71 **Description** The issue is related to the uninitialized use in the File API of Google Chrome, which could allow a remote attacker to potentially perform out of bounds memory access. This can be achieved via a crafted HTML page, allowing the attacker to bypass security restrictions. **Recommendations** For versions prior to 97.0.4692.71, update to version 97.0.4692.71 or later to resolve the issue.