Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

TI-2021-15720 CVE-2021-37976 · GHSA-c9r9-7qcg-7h37

Missing authorization in Google Chrome

Priority CRITICAL 86KEV

Inappropriate implementation in Memory in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.19901 Published 2021-10-08 Fixed in 94.0.4606.71 CWE-862
TI-2021-15718 CVE-2021-37974 · GHSA-v3cp-gvwm-xqjc

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Safebrowsing in Google Chrome prior to 94.0.4606.71 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01346 Published 2021-10-08 Fixed in 94.0.4606.71 CWE-416
TI-2021-15719 CVE-2021-37975 · GHSA-cf6v-2gfq-gj95

Use after free in Google Chrome

Priority CRITICAL 97KEV

Use after free in V8 in Google Chrome prior to 94.0.4606.71 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.34887 Published 2021-10-08 Fixed in 94.0.4606.71 CWE-416