Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Advisory: Google Chrome — DSA-4289 Clear all filters
TI-2018-11494 CVE-2018-16068 · GHSA-q8pm-hj3w-pm64

Improper input validation in Google Chrome

Priority MEDIUM 45

Missing validation in Mojo in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.01937 Published 2019-01-09 Fixed in 69.0.3497.81 CWE-20
TI-2018-11493 CVE-2018-16067 · GHSA-ff9c-648x-7rf5

Use after free in Google Chrome

Priority LOW 32

A use after free in WebAudio in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01408 Published 2019-01-09 Fixed in 69.0.3497.81 CWE-416
TI-2018-11492 CVE-2018-16066 · GHSA-9g4x-mcr9-37h8

Use after free in Google Chrome

Priority LOW 32

A use after free in Blink in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.01459 Published 2019-01-09 Fixed in 69.0.3497.81 CWE-416
TI-2018-11491 CVE-2018-16065 · GHSA-jcx8-qqm3-4qpv

Use after free in Google Chrome

Priority MEDIUM 44

A Javascript reentrancy issues that caused a use-after-free in V8 in Google Chrome prior to 69.0.3497.81 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03239 Published 2019-01-09 Fixed in 69.0.3497.81 CWE-416