CVE-2023-4068

A vulnerability in the V8 JavaScript engine in Google Chrome prior to 144.0.7559.59 is caused by inappropriate implementation, potentially leading to object corruption. A remote attacker can exploit this by delivering a crafted HTML page.

CVE-2026-0899 is a vulnerability in the V8 engine of Google Chrome prior to version 144.0.7559.59. It involves out-of-bounds memory access, which can lead to object corruption. A remote attacker can exploit this flaw via a crafted HTML page.

Inappropriate handling of table size in V8 in Google Chrome prior to version 61.0.3163.100 for Windows allows a remote attacker to trigger out-of-bounds access via a crafted HTML page.

Inappropriate use of JIT optimisation in V8 in Google Chrome prior to version 61.0.3163.100 for Linux, Windows, and Mac allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page, related to the escape analysis phase.

Type confusion in V8 in Google Chrome prior to version 61.0.3163.79 for Mac, Windows, and Linux, and 61.0.3163.81 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

Type confusion in V8 in Google Chrome prior to version 61.0.3163.79 for Windows allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.

A use after free in V8 in Google Chrome prior to version 60.0.3112.78 for Mac, Windows, Linux, and Android allows a remote attacker to perform an out of bounds memory read via a crafted HTML page.

Insufficient validation of untrusted input in V8 in Google Chrome prior to version 59.0.3071.104 for Mac, Windows, and Linux, and 59.0.3071.117 for Android, allowed a remote attacker to perform out of bounds memory access via a crafted HTML page.

An out-of-bounds read in V8 in Google Chrome prior to version 57.0.2987.133 for Linux, Windows, and Mac, and 57.0.2987.132 for Android, allowed a remote attacker to obtain heap memory contents via a crafted HTML page.

Use-after-free vulnerability in V8 in Google Chrome before version 53.0.2785.143 allows remote attackers to cause a denial of service (crash) or possibly have unspecified other impact via unknown vectors.