Multiple Vulnerabilities in Google Chrome Could Allow for Arbitrary Code Execution

Multiple critical vulnerabilities were identified in Google Chrome components (V8 type confusion, use-after-free in Dawn and WebRTC, and an ANGLE heap buffer overflow) which, if exploited—e.g., via a drive-by compromise—could enable arbitrary code execution in the context of the logged-on user and subsequent actions such as installing programs or altering data; impact varies by user privileges.