CVE Vulnerability Catalog

DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload directory. The skill_upload function does not canonicalize the path or check that it remains under the upload root, allowing writes outside it. The endpoint is reachable without authentication, enabling a remote attacker to write arbitrary files and achieve code execution.

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Use after free in ANGLE in Google Chrome on Android prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Critical)

Use after free in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: High)

Use after free in Views in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in WebGL in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Aura in Google Chrome before 152.0.7977.65 allowed a remote attacker to potentially execute arbitrary code outside the sandbox via a crafted HTML page.

Use after free in Aura in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Severity: Critical)

Out of bounds write in the ANGLE component of Google Chrome prior to 152.0.7977.65. A remote attacker can use a crafted HTML page to potentially execute arbitrary code outside the sandbox.

Out of bounds write in the ANGLE component of Google Chrome prior to 152.0.7977.65. A remote attacker can use a crafted HTML page to potentially execute arbitrary code outside the sandbox.

Incorrect authorization in CustomTabs in Google Chrome on Android prior to 152.0.7977.65 allowed a local attacker to bypass web origin policy via a co-installed app. The issue has a low severity.

A use-after-free vulnerability in Views in Google Chrome on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. The issue has a critical severity.

A use-after-free vulnerability in ANGLE in Google Chrome prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. The issue has a high severity.

An off-by-one error in DevTools in Google Chrome prior to 152.0.7977.65 allowed a remote attacker leveraging social engineering to potentially read memory inside the sandbox via a crafted Chrome extension. The issue has a low severity.

A use-after-free vulnerability in Views in Google Chrome on Mac prior to 152.0.7977.65 allowed a remote attacker to execute arbitrary code outside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Out-of-bounds write in ANGLE in Google Chrome on Windows before 152.0.7977.65. A remote attacker can exploit a crafted HTML page to potentially execute arbitrary code outside the sandbox.

Out-of-bounds write in ANGLE in Google Chrome before 152.0.7977.65. A remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page.

Buffer overflow in ANGLE in Google Chrome before 152.0.7977.65. A remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page.

Use-after-free in Sessions in Google Chrome on Android before 152.0.7977.65. A remote attacker leveraging social engineering can execute arbitrary code outside the sandbox via UI interaction.

Use-after-free in Views in Google Chrome on Mac before 152.0.7977.65. A remote attacker can execute arbitrary code outside the sandbox via a crafted HTML page.