CVE Vulnerability Catalog

Use after free in Prerender in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Critical)

Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Memory corruption in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in V8 in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

Use after free in Compositing in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Memory corruption in Workers in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to potentially execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: Medium)

Memory corruption in DOM in Google Chrome prior to 155.0.8059.84 allowed a remote attacker to execute arbitrary code inside the sandbox via a crafted HTML page. (Chromium security severity: High)

A vulnerability in ASP.NET Core involves allocation of resources without limits or throttling. An unauthenticated attacker can cause a denial of service over a network.

A path traversal vulnerability in Microsoft Office SharePoint is caused by improper limitation of a pathname to a restricted directory. An authorized attacker can execute code over a network.

A numeric truncation error in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The flaw stems from improper handling of numeric values.

A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

A heap-based buffer overflow in Microsoft Office Outlook allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

A heap-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

A use-after-free vulnerability in Microsoft Office Excel allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

A stack-based buffer overflow in Microsoft Office Word allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

A heap-based buffer overflow in Microsoft Office allows an unauthenticated attacker to execute code over a network. The vulnerability occurs when processing specially crafted data.

An off-by-one error in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw stems from an incorrect buffer size calculation by one byte.

A use-after-free vulnerability in Microsoft Office Word allows an unauthorized attacker to execute code over a network. The flaw involves accessing memory after it has been freed.