Xinyang Ge

An issue exists where the use of an uninitialized resource allows an authorized attacker to elevate privileges locally on the system.

Improper access control allows an authorized attacker to perform local spoofing, which enables them to affect the system.

An improper synchronization issue, known as a race condition (where two or more operations attempt to access shared data concurrently), exists in Windows Hyper-V. This allows an authorized attacker to cause a local denial of service.

A use after free issue in Windows Hyper-V allows an authorized attacker to elevate privileges locally. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A buffer overflow exists in the Media component, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold, potentially overwriting adjacent memory locations.

A use after free issue exists in the PictureInPicture component. A remote attacker can leverage social engineering to execute arbitrary code outside the sandbox by inducing a user to visit a crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A use after free issue exists in PerformanceAPIs, which allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to visit a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A buffer overflow exists in PDFium, a PDF rendering engine. This flaw allows a remote attacker to execute arbitrary code within the sandbox by inducing the application to process a specially crafted PDF file.

An uninitialized resource in the Images component allows a remote attacker to obtain cross-origin data by using a crafted HTML page. Cross-origin data access occurs when a script or request from one origin attempts to access data from a different origin, which is typically restricted by the Same-Origin Policy.

A use after free issue in the DOM allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A use-after-free issue exists in the Prerender component. This occurs when a program continues to use a pointer after the memory it points to has been freed, which can lead to memory corruption. A remote attacker can exploit this by using a crafted HTML page to execute arbitrary code outside the sandbox.

A use after free issue in PDFium allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A use after free issue in the Editing component allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A use after free issue in the DOM allows a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A use after free issue in the Network component allows a remote attacker to potentially execute arbitrary code outside the sandbox by sending crafted network traffic. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A use after free issue exists in the Animation component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker can exploit this by inducing a user to open a specially crafted HTML page, allowing the execution of arbitrary code within the sandbox.

A use after free issue in Layout allows a remote attacker to execute arbitrary code inside the sandbox by using a crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.

A use after free issue exists in the SVG component. This occurs when a program continues to use a pointer after it has been freed, which can lead to memory corruption. A remote attacker can exploit this by inducing a user to open a specially crafted HTML page, allowing the execution of arbitrary code within the sandbox.

A buffer overflow in the Skia graphics library allows a remote attacker to execute arbitrary code outside the sandbox by inducing the user to open a specially crafted HTML page. A buffer overflow occurs when a program writes more data to a block of memory, or buffer, than it is designed to hold, potentially overwriting adjacent memory locations.

A use after free issue exists in WTF, which can allow a remote attacker to execute arbitrary code within the sandbox by inducing the user to open a specially crafted HTML page. Use after free is a memory corruption flaw that occurs when an application continues to use a pointer after it has been freed.