Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2022-02292 CVE-2022-2481 · GHSA-j8f6-f8vv-9f5c

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Views in Google Chrome prior to 103.0.5060.134 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via UI interaction.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01214 Published 2022-07-28 Fixed in 103.0.5060.134 CWE-416
TI-2022-02291 CVE-2022-2480 · GHSA-997v-v566-5ff3

Use after free in Google Chrome

Priority MEDIUM 56

Use after free in Service Worker API in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.18839 Published 2022-07-28 Fixed in 103.0.5060.134 CWE-416
TI-2022-02290 CVE-2022-2479 · GHSA-pmv2-vq2x-c74g

Improper input validation in Google Chrome

Priority LOW 22

Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious app to obtain potentially sensitive information from…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00838 Published 2022-07-28 Fixed in 103.0.5060.134 CWE-20
TI-2022-02289 CVE-2022-2478 · GHSA-qp6c-hjgr-2593

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in PDF in Google Chrome prior to 103.0.5060.134 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00898 Published 2022-07-28 Fixed in 103.0.5060.134 CWE-416
TI-2022-02288 CVE-2022-2477 · GHSA-v66m-xq92-9p2c

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Guest View in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00865 Published 2022-07-28 Fixed in 103.0.5060.134 CWE-416
TI-2022-01778 CVE-2022-1919 · GHSA-43c7-728f-g6cx

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Codecs in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01384 Published 2022-07-28 Fixed in 101.0.4951.41 CWE-416