Use-after-free in Google Chrome's Chromoting (Chrome Remote Desktop) component allows unauthenticated remote attackers to execute arbitrary code inside the browser sandbox when a victim renders a crafted HTML page on builds prior to 156.0.8078.47. Exploitation is gated by mandatory user interaction (the victim must navigate to attacker-controlled content) and the resulting code execution is confined to the sandbox, which is why Chromium assigned the issue a Low security severity; our independent assessment likewise rates confidentiality, integrity and availability impact as Low rather than the 8.8 base score published in other feeds. No public exploit code or confirmed active exploitation was identified at time of analysis, and no KEV listing applies.
A use-after-free in Chrome's Media component (CWE-416) lets a remote attacker who convinces a victim to open a crafted HTML page execute arbitrary code within the renderer sandbox on any Chrome build prior to 156.0.8078.47. Exploitation requires user interaction (UI:R) but no authentication or privileges (PR:N), and default configurations are exposed, giving the flaw an 8.8 CVSS rating; Google rates Chromium security severity as Medium because the resulting code execution is confined to the sandbox, and reaching the host would require chaining a separate sandbox escape. No public exploit code or confirmed active exploitation was identified at time of analysis, though the vendor has released a patched build.
Sandbox-confined arbitrary code execution in Google Chrome's Chromoting (Chrome Remote Desktop) component affects versions prior to 156.0.8078.47; a remote, unauthenticated attacker can trigger it only if a victim opens a crafted HTML page (UI:R). Chromium rates the flaw Low, and no public exploit or CISA KEV entry was identified at time of analysis, so NVD's 8.8 score overstates risk: execution does not escape the browser sandbox, and our assessment is C:L/I:L/A:L. Updating to 156.0.8078.47 or later removes the flaw.
Memory corruption in Google Chrome's Chromoting component (Chrome Remote Desktop) prior to 156.0.8078.47 allows an unauthenticated remote attacker to potentially execute arbitrary code inside the browser sandbox when a victim opens a crafted HTML page. Successful exploitation requires user interaction, and code execution is confined within the sandbox, so host-level compromise would require chaining a separate sandbox-escape vulnerability that this CVE does not provide. Chromium rates the issue Low despite NVD's 8.8 score, and no public exploit was identified at time of analysis; a vendor patch is available.
Improper input validation in Google Chrome's Bluetooth implementation (CWE-20) prior to 156.0.8078.47 allows a remote attacker to achieve arbitrary code execution inside the browser sandbox when a victim navigates to a crafted HTML page. The flaw is unauthenticated and network-reachable (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base 8.8) but requires user interaction, and the vendor explicitly confines the resulting code execution to the sandbox, so full host compromise would require a separate sandbox escape. Chromium rates the issue Medium severity, no public exploit code or CISA KEV confirmation was identified at time of analysis, and a vendor patch is available in Chrome 156.0.8078.47.
Memory corruption in Google Chrome's V8 JavaScript engine before 156.0.8078.47 lets remote, unauthenticated attackers execute arbitrary code inside Chrome's sandbox when a victim opens a crafted HTML page. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base 8.8) reflects high confidentiality, integrity, and availability impact but requires user interaction, and the code execution is sandbox-contained, so host compromise would require a separate sandbox-escape exploit. A vendor patch is available in 156.0.8078.47, and no public exploit code was identified at time of analysis.
Memory corruption in Google Chrome's Core component allows a remote, unauthenticated attacker to execute arbitrary code inside the browser sandbox when a victim loads a crafted HTML page in any desktop build prior to 156.0.8078.47. The assessed CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, 8.8 High) reflects low-complexity exploitation gated only by the user-interaction requirement, with sandbox containment (S:U) meaning a standalone compromise yields renderer-level code execution rather than direct host takeover. No public exploit code or confirmed active exploitation (CISA KEV) was identified at time of analysis, and no EPSS score was supplied in the source feed; Google rates the flaw Medium under its own Chromium severity scale, and a vendor patch is available.
Use-after-free in Google Chrome's V8 JavaScript engine (versions prior to 156.0.8078.47) allows remote attackers to execute arbitrary code inside the renderer sandbox when a victim visits a crafted HTML page. The flaw is rated CVSS 3.1 8.8 (High) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, reflecting network reachability, low complexity, no privileges, and required user interaction; code execution is confined to the sandbox, so OS compromise would require an additional sandbox escape. A vendor-released patch is available as version 156.0.8078.47, and no public exploit has been identified at time of analysis.
Use-after-free in Google Chrome's Extensions component before 156.0.8078.47 allows unauthenticated remote attackers to execute arbitrary code inside the browser sandbox when a victim loads a crafted HTML page. Exploitation requires user interaction and is confined to the sandbox, so full host compromise would require a separate sandbox-escape vulnerability; the vendor rates this Chromium security severity Medium while the supplied CVSS score is 8.8. No public exploit identified at time of analysis.
A use-after-free in Chrome's Actor component affects versions prior to 156.0.8078.47, allowing remote code execution inside the browser sandbox when a victim loads a crafted HTML page. Exploitation is not zero-click: the CVSS vector (UI:R, PR:N) requires the target to navigate to or render attacker-controlled content in a default configuration, and no public exploit code or CISA KEV confirmation is available at time of analysis. Because the flaw yields code execution only within the sandbox, it must be chained with a separate sandbox escape to fully compromise the host.
Remote code execution in Google Chrome's Proxy component (versions before 156.0.8078.47) stems from improper input validation that can be triggered when an unauthenticated remote attacker convinces a victim to load a crafted HTML page. Exploitation requires user interaction (UI:R) and yields code execution confined within the browser sandbox; no public exploit was identified at time of analysis.
Use-after-free in Google Chrome's Bookmarks component (all builds prior to 156.0.8078.47) allows a remote attacker to execute arbitrary code inside the renderer sandbox when a victim loads a crafted HTML page. Exploitation is unauthenticated from the network side but requires user interaction - the victim must visit or render the malicious page - and the resulting code execution is confined to Chrome's renderer sandbox, so full OS compromise would require chaining a separate sandbox-escape flaw. Google rates the underlying Chromium issue as Low severity, and no public exploit code or active exploitation has been identified at time of analysis; the CVSS 3.1 base score of 8.8 reflects the memory-corruption impact class rather than a demonstrated attack in the wild.
Sandboxed code execution in Google Chrome versions prior to 156.0.8078.47 is possible through a use-after-free flaw in the WindowControlsOverlay component, which a remote, unauthenticated attacker can trigger by convincing a victim to open a crafted HTML page (CVSS 3.1: 8.8, AV:N/AC:L/PR:N/UI:R). Successful exploitation yields arbitrary code execution, but strictly within the renderer sandbox - the attacker gains no direct access to the host operating system without chaining a separate sandbox-escape bug, which is why Google rates the issue only Medium in its own severity scheme. Google has shipped a vendor fix in Chrome 156.0.8078.47; no public exploit code or confirmed active exploitation was identified at time of analysis, and the attack is not drive-by - it requires deliberate user navigation to attacker-controlled content.
Memory corruption in Google Chrome's Transactions Platform component (desktop builds prior to 156.0.8078.47) lets remote attackers potentially execute arbitrary code inside the renderer sandbox when a victim loads a crafted HTML page, rated CVSS 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) because the malicious page can fully compromise the confidentiality, integrity and availability of the sandboxed browser process. Affected users are those running any Chrome version below 156.0.8078.47 in its default configuration; exploitation is unauthenticated but requires the victim to navigate to attacker-controlled content. There is no CISA KEV entry and no public exploit identified at time of analysis, and Google has released a vendor patch in the 156.0.8078.47 stable-channel update, though Chrome's automatic update mechanism also narrows the realistic exposure window and limits this to a patch-priority issue rather than an emergency.
Out-of-bounds read in Google Chrome's Navigation component allows a remote attacker to potentially execute arbitrary code inside the renderer sandbox by getting a victim to load a crafted HTML page on any build prior to 156.0.8078.47. The only real prerequisite is user interaction (UI:R) - a default desktop install is exposed, no authentication or special configuration is needed, so the practical risk concentrates on endpoints with delayed or disabled auto-updates. There is no public exploit identified at time of analysis and no KEV listing; Google shipped the fix in the Stable channel build 156.0.8078.47, and the Chromium team self-rated the issue Medium despite an 8.8 vector score.
Memory corruption in Chrome's Bluetooth component affects all builds prior to 156.0.8078.47 and lets a remote attacker achieve code execution inside the browser sandbox by convincing a victim to open a crafted HTML page. Exploitation requires user interaction (UI:R) and no authentication (PR:N), and any code that runs is contained by the Chrome sandbox - turning it into host compromise would require chaining a separate sandbox escape not covered by this CVE. No public exploit code or CISA KEV entry is reported in the available data, and a vendor patch shipping in Chrome 156.0.8078.47 addresses the flaw; Chromium rates it Medium security severity despite the 8.8 CVSS score.
Memory corruption in Google Chrome's Sync component before 156.0.8078.47 allows remote attackers to execute arbitrary code inside the renderer sandbox when a victim loads a crafted HTML page. The issue is network-reachable and unauthenticated per the CVSS vector, but exploitation requires user interaction, and code execution is confined to Chrome's sandbox unless chained with a separate sandbox escape. No public exploit was identified at time of analysis, and Google has released a fixed Chrome build.
Memory corruption in Chrome's HID (WebHID) handling lets a remote attacker who convinces a victim to load a crafted HTML page execute arbitrary code inside the browser sandbox on versions prior to 156.0.8078.47. Exploitation is unauthenticated (PR:N) but requires user interaction (UI:R) - the victim must visit or interact with the attacker-controlled page - and the resulting code execution is confined to the sandboxed renderer, so host compromise would still require a separate sandbox-escape bug. No public exploit code or confirmed active exploitation was identified at time of analysis, though the 8.8 CVSS and memory-corruption primitive make it a high-priority patch item; Chromium itself rates the issue Medium and Google has released a fixed build.
Use-after-free in Google Chrome's Workers implementation allows a remote, unauthenticated attacker to execute arbitrary code inside the browser's renderer sandbox if the victim loads a crafted HTML page. Only Chrome builds prior to 156.0.8078.47 are affected; exploitation requires user interaction (UI:R) and remains confined to the renderer sandbox, so host compromise would require a separate sandbox escape. No public exploit code or CISA KEV entry was identified at time of analysis, and the vendor has released 156.0.8078.47 as the fix.
Memory corruption in Google Chrome's Paint rendering component can allow a remote, unauthenticated attacker to execute arbitrary code inside the browser sandbox when a victim loads a crafted HTML page in a version prior to 156.0.8078.47. Exploitation is user-interaction-gated because the victim must visit or be redirected to attacker-controlled content, and the resulting code execution is confined to the renderer sandbox unless combined with a separate sandbox-escape flaw. No public exploit identified at time of analysis, and the vendor has released Chrome 156.0.8078.47 as the fixed version.
Memory corruption in Google Chrome's Views component before 156.0.8078.47 allows an unauthenticated remote attacker who convinces a victim to open a crafted HTML page to execute arbitrary code inside the renderer sandbox. Google assigns this issue Low severity, and no public exploit was identified at time of analysis; the 8.8 NVD score overstates host-level risk because a separate sandbox escape would be needed to affect the operating system or other origins.
Memory corruption in Chrome's CSS handling lets a remote attacker who convinces a victim to load a crafted HTML page trigger arbitrary code execution inside the renderer sandbox, affecting Chrome builds prior to 156.0.8078.47. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R) means exploitation is unauthenticated but requires user interaction - the target must open the malicious page via a link, malvertising, or a compromised site. Impact is capped by the sandbox: full host compromise requires chaining with a separate sandbox-escape, and no public exploit or CISA KEV entry was identified at time of analysis, though Google rates the flaw Medium on its own severity scale.
Memory corruption in Google Chrome's Loader component before 156.0.8078.47 allows remote attackers to execute arbitrary code inside the browser sandbox when a victim opens a crafted HTML page. The issue carries a High CVSS score of 8.8 because exploitation is network-reachable and unauthenticated with only user interaction required, although Chromium's own severity rating is Low and the resulting code execution remains confined to the sandbox, so full host compromise would require a separate sandbox-escape chain. The vendor has released a fixed build, and no public exploit code or active exploitation is identified in the provided intelligence.
A use-after-free in Chrome's Animation component affects versions prior to 156.0.8078.47: a remote attacker can lure a victim into loading a crafted HTML page that triggers memory corruption and yields arbitrary code execution - but only inside the renderer sandbox, not on the host. The CVSS 8.8 reflects high confidentiality/integrity/availability impact to the sandboxed renderer, tempered by the required user interaction and the architectural containment; host compromise would require chaining a separate sandbox-escape flaw. No public exploit code or confirmed active exploitation was identified at time of analysis, and Google has released a patched stable build.
Use-after-free in Chrome's Input handling allows remote code execution inside the renderer sandbox when a user opens a crafted HTML page in any Chrome build prior to 156.0.8078.47. Exploitation requires user interaction (UI:R) but no authentication (PR:N), and code execution is confined to the renderer sandbox, so host compromise requires chaining a separate sandbox escape; Google rates the flaw High severity. No public exploit code or confirmed active exploitation was identified at time of analysis, and the vendor has released a fix.
Remote code execution inside Chrome's renderer sandbox is possible in Google Chrome versions prior to 156.0.8078.47 through a use-after-free in the Frames component. An unauthenticated remote attacker can trigger the flaw by convincing a victim to load a crafted HTML page (UI:R). Successful exploitation is confined to the renderer sandbox and would require a separate sandbox escape for host compromise; no public exploit code or CISA KEV entry was identified at time of analysis.
Use-after-free memory corruption in Google Chrome's Canvas implementation allows remote attackers to execute arbitrary code inside the renderer sandbox when a victim loads a crafted HTML page, affecting Chrome builds prior to 156.0.8078.47 across desktop and ChromeOS channels. Exploitation is unauthenticated (PR:N) but requires user interaction (UI:R): the target must navigate to or render attacker-controlled content such as a malicious link, compromised site, or injected ad/iframe, and the Canvas path is reachable in default configurations with no special toggle. Impact is bounded by the sandbox - code execution stays within the renderer (S:U) and host-level compromise would require a separate sandbox-escape - and at time of analysis no public exploit code has been identified; enterprise patch cadence, not emergency response, is the driver, and Google rates the flaw Chromium security severity High (CVSS 8.8).
Use-after-free in Google Chrome's PDF handling before 156.0.8078.47 allows a remote attacker to execute arbitrary code inside the Chrome sandbox when a victim opens a crafted HTML page. The issue is unauthenticated (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, 8.8) but requires user interaction; Chromium's own severity rating is Low, reflecting that code execution is confined to the sandbox and host compromise would require chaining a separate sandbox escape. No public exploit was identified at time of analysis, and Google has released a fixed build.
Google Chrome before 156.0.8078.47 contains a use-after-free in the ANGLE graphics backend that can be triggered when a user opens a crafted HTML page, potentially allowing code execution inside the renderer sandbox. The vulnerability is remote and requires user interaction (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, 8.8), but because scope is unchanged, host compromise would require chaining with a separate sandbox escape. No public exploit code has been identified at time of analysis, and Google has released Chrome 156.0.8078.47 as the vendor fix.
Use-after-free in Google Chrome's CSS handling lets a remote attacker potentially execute arbitrary code inside the renderer sandbox when a victim loads a crafted HTML page in any build prior to 156.0.8078.47. Exploitation requires user interaction (CVSS UI:R) - visiting or being redirected to a malicious or compromised page - but no credentials or non-default configuration, since the flaw sits in the default rendering path. The impact is bounded: the description specifies code execution 'inside the sandbox,' so host compromise needs a separate sandbox escape, and no public exploit code or confirmed active exploitation was identified at time of analysis. Google shipped a stable-channel fix in 156.0.8078.47, and Chrome's automatic updater sharply shrinks the exposed population once that build propagates.
A use-after-free in ANGLE, the graphics translation layer behind Chrome's WebGL and hardware-accelerated canvas rendering, lets a crafted HTML page corrupt renderer memory and achieve arbitrary code execution inside the browser sandbox in Google Chrome builds prior to 156.0.8078.47. Exploitation is unauthenticated (PR:N) but requires the victim to load attacker-controlled web content that exercises WebGL paths, and no non-default configuration is needed - the component is enabled by default. Multiple signals align toward genuine priority with one important nuance: code execution is confined to the renderer sandbox, so host compromise would require chaining a separate sandbox escape. At time of analysis, no public exploit code and no confirmed active exploitation (CISA KEV) were identified, though the 8.8 CVSS and RCE-class tagging warrant prompt patching.
Use-after-free in Google Chrome's Internals component on macOS lets a remote attacker execute arbitrary code inside the renderer sandbox when a victim loads a crafted HTML page, and Google has released Chrome 156.0.8078.47 to fix it. The bug is remotely reachable without credentials but requires the user to open or be redirected to attacker-controlled content (UI:R), is limited to macOS builds, and yields code execution confined to the sandbox - host-level compromise would need a separate sandbox escape, which is why Chrome rates it Medium despite a High 8.8 CVSS. No public exploit code or confirmed active exploitation was identified at time of analysis, so the practical risk is concentrated in targeted phishing or watering-hole delivery against macOS Chrome users.
Use-after-free in Google Chrome's ServiceWorker implementation affects desktop Chrome builds prior to 156.0.8078.47 and can let a remote attacker execute arbitrary code inside the browser sandbox when a victim renders a crafted HTML page. The issue is rated CVSS 8.8 with UI:R and PR:N, so exploitation depends on user navigation rather than credentials; the code-execution impact is constrained to the sandboxed renderer, and a separate sandbox escape would be needed to compromise the host OS. No public exploit was identified at time of analysis, and there is no CISA KEV confirmation of active exploitation.
Use-after-free in Google Chrome's FileSystem component before 156.0.8078.47 allows remote attackers to trigger memory corruption and execute arbitrary code inside the renderer sandbox when a victim loads a crafted HTML page. The flaw is network-reachable, low-complexity, and unauthenticated (CVSS 3.1 base 8.8, PR:N), but successful exploitation requires user interaction and remains scoped to the sandbox, so host compromise would need a separate sandbox-escape vulnerability. No public exploit code or CISA KEV entry was identified at time of analysis; Google has released a vendor patch in Chrome 156.0.8078.47.
Memory corruption in Google Chrome's Omnibox component before 156.0.8078.47 allows unauthenticated remote attackers to potentially execute arbitrary code inside the renderer sandbox when a victim loads a crafted HTML page. Exploitation requires user interaction (UI:R), and the impact is confined to the sandboxed renderer unless chained with a separate sandbox-escape flaw. No public exploit code was identified at the time of analysis, and Google has released a fixed build, 156.0.8078.47.
Code execution inside the renderer sandbox in Google Chrome before 156.0.8078.47 is possible when a victim visits a crafted HTML page that exploits improper input validation in the FileSystem component. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, base 8.8) describes a network-reachable, low-complexity, unauthenticated issue that requires user interaction; successful exploitation remains confined to the sandbox and host compromise would require chaining a separate sandbox-escape vulnerability. No public exploit identified at time of analysis, and Google has released a vendor patch in Chrome 156.0.8078.47.
Memory corruption in the ContextMenu component of Google Chrome for Android allows remote attackers to potentially execute arbitrary code inside the renderer sandbox when a victim opens a crafted HTML page, affecting versions prior to 156.0.8078.47. Exploitation requires user interaction (UI:R) and no authentication (PR:N); despite a CVSS base score of 8.8, Chromium rates the issue Low because code execution is confined to the sandbox, so full device compromise would require an additional sandbox-escape primitive. No public exploit has been identified at time of analysis, and the vendor-released fixed version is Chrome 156.0.8078.47.
Memory corruption in the 'Actor' component of Google Chrome for Android before 156.0.8078.47 lets a remote attacker execute arbitrary code inside the renderer sandbox when a victim renders a crafted HTML page. The flaw is unauthenticated (PR:N) and requires only that the target open the malicious page (UI:R), but the resulting code execution is confined to the browser's renderer sandbox on Android - full host compromise would require chaining a separate sandbox-escape bug. Google rates the Chromium security severity as Low because of that sandbox confinement, while the CVSS 3.1 vector (8.8, AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) reflects high confidentiality and integrity impact within the sandboxed context; a vendor fix is available in 156.0.8078.47 and no public exploit has been identified at time of analysis.
Google Chrome for Android before 156.0.8078.47 contains a use-after-free in the Notifications component that permits a remote, unauthenticated attacker to execute arbitrary code within the renderer sandbox when a victim loads a crafted HTML page. Exploitation requires the user to visit and interact with attacker-controlled content (UI:R), and any resulting code execution stays inside the browser sandbox (S:U), so a separate sandbox-escape bug is needed for host compromise. No public exploit code or confirmed active exploitation was identified at time of analysis; Google has released a vendor patch in the stable channel.
Memory corruption in Chrome for Android's Omnibox prior to 156.0.8078.47 can let a remote, unauthenticated attacker execute arbitrary code inside the browser sandbox when a victim loads a crafted HTML page. The CVSS 3.1 vector scores 8.8 High with user interaction required (UI:R), but scope is unchanged (S:U), so this flaw alone does not provide host or device compromise; chaining with a separate sandbox escape would be needed for that. No public exploit was identified at time of analysis, and Google has released Chrome 156.0.8078.47 as the vendor fix.
Oracle Capacity in Oracle E-Business Suite 12.2.3 through 12.2.15 can be taken over by a low-privileged authenticated attacker who can reach the Capacity module over HTTP, with high confidentiality, integrity, and availability impact (CVSS 8.8). The CVSS vector requires PR:L, so exploitation is not pre-authentication; any valid low-privileged EBS account is sufficient, making multi-user ERP deployments the main exposure. No public exploit code or confirmed active exploitation was identified in the supplied intelligence, and no EPSS score was provided.
Improper access control in Chrome's ANGLE graphics layer enables remote code execution inside the browser sandbox on Google Chrome versions earlier than 156.0.8078.47 when a victim renders a crafted HTML page. The CVSS 3.1 vector is 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H), but Google rates it Low because the impact is confined to the renderer sandbox and no sandbox escape is shown; exploitation requires user interaction, authentication is not required per PR:N, and no public exploit identified at time of analysis. The conflicting signals - high CVSS and RCE/authentication-bypass tags versus vendor Low and sandbox-only impact - should be weighed when prioritizing.
Authenticated low-privilege users can achieve takeover of Oracle Business Intelligence Enterprise Edition through its BI Search component, with high confidentiality, integrity, and availability impact. Affected deployments include versions 8.2.0.0.0, 12.2.1.4.0, and 26.01.0.0.0; exploitation requires network access over HTTP and a valid low-privileged account but no user interaction. No public exploit code or confirmed active exploitation was identified at time of analysis, though low attack complexity makes prompt patching important.
Authenticated low-privileged users can achieve takeover of Oracle Siebel CRM Deployment (Server Infrastructure) in versions 17.0 through 26.9 through the HTTP interface, with high impact to confidentiality, integrity, and availability (CVSS 8.8). The requirement for a valid low-tier CRM session is the main barrier, but no user interaction or special attack complexity is indicated; no public exploit was identified at time of analysis.
Authenticated low-privileged attackers can achieve full takeover of Oracle Agile Product Lifecycle Management for Process 6.2.4 by sending crafted HTTP requests to the Product Quality Management component. The flaw is network-exploitable, requires no user interaction, and yields complete compromise of confidentiality, integrity, and availability (CVSS 8.8). No public exploit code has been identified at the time of analysis, and the vulnerability is not listed in CISA KEV.
An authenticated, low-privileged attacker with network access to the JDENET service can fully compromise JD Edwards EnterpriseOne Tools releases 9.2.0.0 through 9.2.26.5, gaining high impact to confidentiality, integrity, and availability (CVSS 3.1 base 8.8, vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The defect sits in the Installation SEC component, and successful exploitation is described by Oracle as enabling takeover of the EnterpriseOne Tools instance. No public exploit code and no confirmed active exploitation were identified at time of analysis, but the low attack complexity and the fact that JDENET is frequently reachable across enterprise networks make this a credible operational priority rather than an inflated high-CVSS score.
Authenticated low-privileged users with HTTP reachability to the JD Edwards EnterpriseOne Tools web tier can take full control of the Web Runtime SEC component in versions 9.2.0.0 through 9.2.26.5, with high confidentiality, integrity, and availability impact (CVSS 3.1 base 8.8, AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). The barrier to entry is low: any valid non-administrative EnterpriseOne account plus network access to the HTML/web runtime is sufficient, with no user interaction and no non-default configuration precondition cited by Oracle. No public exploit code has been identified at time of analysis and the issue is not in CISA KEV, but EPSS scoring was not available in the supplied intelligence, so prevalence-weighted risk should be treated as unquantified rather than low.
Heap use-after-free in Google Chrome's Network component allows remote code execution within the browser sandbox: any Chrome build prior to 156.0.8078.47 that renders an attacker-crafted HTML page can trigger memory corruption and achieve code execution at the browser's privilege level. No credentials or privileges are required (PR:N), but exploitation is not zero-click - the victim must navigate to or load the malicious content, as reflected by CVSS UI:R and the vendor's 'crafted HTML page' wording. Chromium rates the issue Medium severity even though the CVSS 3.1 base score computes to 8.8 (C:H/I:H/A:H); no public exploit code or CISA KEV entry was identified at time of analysis, and the practical ceiling on impact is the Chrome sandbox, which must be escaped separately for host-level compromise.
Use-after-free in the Google Lens component of Google Chrome versions prior to 156.0.8078.47 allows a remote, unauthenticated attacker to execute arbitrary code inside the browser sandbox when a victim renders a crafted HTML page. Exploitation requires user interaction (the victim must visit or render attacker-controlled content), and the resulting code execution is confined by Chrome's sandbox, so full host compromise would require chaining a separate sandbox-escape flaw. No public exploit code was identified at the time of analysis, and the vendor has released Chrome 156.0.8078.47 to address the issue.
Arbitrary code execution inside the Chrome for Android sandbox (versions before 156.0.8078.47) can be triggered by a crafted HTML page that exploits a use-after-free in Autofill. The attacker must persuade the victim to load the page (UI:R), but no authentication is required (PR:N); the resulting code runs within the renderer sandbox unless a separate sandbox-escape vulnerability is chained. No public exploit code has been identified at time of analysis, and Google has released fixed build 156.0.8078.47.