Yuntao You

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 150.0.7871.46 **Description** An inappropriate implementation in the V8 engine allows a remote attacker to execute arbitrary code within a sandbox. This occurs when a user is convinced to perform specific UI gestures while interacting with a crafted HTML page. **Recommendations** Update Google Chrome to version 150.0.7871.46 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 150.0.7871.46 **Description** An uninitialized use in the V8 engine allows a remote attacker to execute arbitrary code within a sandbox by using a specially crafted HTML page. V8 is the open-source JavaScript and WebAssembly engine used by Chrome to execute code. **Recommendations** Update Google Chrome to version 150.0.7871.46 or later.

**Name of the Vulnerable Software and Affected Versions** Google Chrome versions prior to 102.0.5005.61 **Description** The issue is related to a use after free in WebApp Installs, which could allow an attacker to potentially exploit heap corruption via a crafted Chrome Extension and specific user interaction. This could be achieved if the attacker convinces a user to install a malicious extension. The vulnerability may also allow a remote attacker to disclose protected information using a specially crafted web page. **Recommendations** For versions prior to 102.0.5005.61, update to version 102.0.5005.61 or later to resolve the issue. As a temporary workaround, consider restricting the installation of extensions to minimize the risk of exploitation. Avoid using crafted Chrome Extensions until the issue is resolved.