Privilege escalation due to use-after-free in the Graphics: WebRender component

Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the DOM: Core & HTML component

Use-after-free in the XSLT component

Use-after-free in the Graphics: Canvas2D component

Use-after-free in the DOM: Core & HTML component

Use-after-free in the Layout: Text and Fonts component

Privilege escalation due to incorrect boundary conditions in the Graphics component

Use-after-free in the DOM: Core & HTML component

Use-after-free in the XSLT component

Use-after-free in the Graphics: Canvas2D component

Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the DOM: Core & HTML component

Use-after-free in the Storage: IndexedDB component

Use-after-free in the DOM: Core & HTML component

Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the Graphics: WebGPU component

Use-after-free in the Networking: Cache component

Use-after-free in the JavaScript: WebAssembly component

Privilege escalation due to incorrect boundary conditions in the Graphics: WebGPU component

Privilege escalation due to use-after-free in the Graphics: WebGPU component

Use-after-free in the Widget component

Incorrect boundary conditions in the Networking component

Mitigation bypass in the Popup Blocker component

Privilege escalation in the Enterprise Policies component

Use-after-free in the Widget: Gtk component

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Sandbox escape due to incorrect boundary conditions in the Widget: Win32 component

Privilege escalation in the Session Restore component

Use-after-free in the Internationalization component

Use-after-free in the Graphics component

Use-after-free in the Graphics: Text component

Privilege escalation in the DevTools component

Privilege escalation in the Memory component

Privilege escalation in the Graphics: CanvasWebGL component

Privilege escalation due to uninitialized memory in the Graphics: CanvasWebGL component

Use-after-free in the Widget: Win32 component

Privilege escalation in the Crash Reporting component

Use-after-free in the Graphics component

Privilege escalation due to incorrect boundary conditions in the Audio/Video component

Use-after-free in the JavaScript: WebAssembly component

Use-after-free in the SVG component

Use-after-free in the DOM: Core & HTML component

Use-after-free in the DOM: Streams component

Use-after-free in the Networking component

Use-after-free in the DOM: Navigation component

Use-after-free in the SVG component

Use-after-free in the XML component

Use-after-free in the DOM: HTML Parser component

Use-after-free in the JavaScript Engine: JIT component