NVD disclosure day

Published threat advisories for July 29, 2023

CVE-2022-4924

Chrome WebRTC Use After Free Sandbox Escape Vulnerability

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A use-after-free vulnerability in Chrome's WebRTC component may allow a remote attacker who has compromised the renderer process to escape the browser's sandbox via a crafted HTML page. This could potentially lead to unauthorized access or manipulation of data within the browser process.

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2022-4920

Google Chrome Heap Buffer Overflow Sandbox Escape

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

A heap buffer overflow in Chrome could allow a remote attacker to escape the browser sandbox if a user is tricked into interacting with a crafted HTML page. This vulnerability requires specific user gestures to trigger, making it less likely to be exploited without direct user interaction.

NVD modified: NVD date unavailable