Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

TI-2020-12623 CVE-2020-16011 · GHSA-p2gp-7c6p-m287

Out-of-bounds write in Google Chrome

Priority MEDIUM 46

Heap buffer overflow in UI in Google Chrome on Windows prior to 86.0.4240.183 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.02408 Published 2020-11-03 Fixed in 86.0.4240.183 CWE-787
TI-2020-12621 CVE-2020-16009 · GHSA-m7mf-48hp-5qmr

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.48293 Published 2020-11-03 Fixed in 86.0.4240.183, 86.0.241 CWE-787
TI-2020-12620 CVE-2020-16008 · GHSA-xvqc-4q7g-qm76

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Stack buffer overflow in WebRTC in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit stack corruption via a crafted WebRTC packet.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01151 Published 2020-11-03 Fixed in 86.0.4240.183 CWE-787
TI-2020-12619 CVE-2020-16007 · GHSA-pq88-763g-v6f6

Link following in Google Chrome

Priority LOW 34

Insufficient data validation in installer in Google Chrome prior to 86.0.4240.183 allowed a local attacker to potentially elevate privilege via a crafted filesystem.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00273 Published 2020-11-03 Fixed in 86.0.4240.183 CWE-59
TI-2020-12618 CVE-2020-16006 · GHSA-fxv8-vq3h-mfh5

Out-of-bounds write in Google Chrome

Priority MEDIUM 41

Inappropriate implementation in V8 in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01673 Published 2020-11-03 Fixed in 86.0.4240.183 CWE-787
Priority MEDIUM 41

Insufficient policy enforcement in ANGLE in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01673 Published 2020-11-03 Fixed in 86.0.4240.183 CWE-755
TI-2020-12616 CVE-2020-16004 · GHSA-f357-qjmq-g8qc

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in user interface in Google Chrome prior to 86.0.4240.183 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0152 Published 2020-11-03 Fixed in 86.0.4240.183 CWE-416