Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

TI-2022-02119 CVE-2022-2296 · GHSA-7chm-35rg-7jv7

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via di…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01148 Published 2022-07-28 Fixed in 103.0.5060.114 CWE-416
TI-2022-02118 CVE-2022-2295 · GHSA-gmjf-5wf6-pxg7

Type confusion in Google Chrome

Priority MEDIUM 41

Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01458 Published 2022-07-28 Fixed in 103.0.5060.114 CWE-843
TI-2022-02001 CVE-2022-2163 · GHSA-ggwf-6xhf-79v5

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via UI interaction.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00843 Published 2022-07-28 Fixed in 103.0.5060.134 CWE-416
Priority LOW 29

Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML p…

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00668 Published 2022-07-28 Fixed in 103.0.5060.53
TI-2022-01999 CVE-2022-2161 · GHSA-c6vh-r249-cvjj

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who convinced the user to engage in specific user interactions to potentially exploit heap corruption via specific UI in…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01008 Published 2022-07-28 Fixed in 103.0.5060.53 CWE-416
TI-2022-01998 CVE-2022-2160 · GHSA-jrfh-w785-mgxc

Race condition in Google Chrome

Priority LOW 30

Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00715 Published 2022-07-28 Fixed in 103.0.5060.53 CWE-362
TI-2022-01997 CVE-2022-2158 · GHSA-3qp3-ccr6-rf5c

Use after free in Google Chrome

Priority MEDIUM 40

Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01058 Published 2022-07-28 Fixed in 103.0.5060.53 CWE-416
TI-2022-01996 CVE-2022-2157 · GHSA-pm9j-5fc9-5q4v

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01029 Published 2022-07-28 Fixed in 103.0.5060.53 CWE-416
TI-2022-01995 CVE-2022-2156 · GHSA-pvf7-fvgh-4cq4

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Core in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01525 Published 2022-07-28 Fixed in 103.0.5060.53 CWE-416
TI-2022-02117 CVE-2022-2294 · GHSA-9q96-cwq7-cr4m

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.70833 Published 2022-07-28 Fixed in 103.0.5060.114 CWE-787