Priority MEDIUM 40
Use after free in Chrome OS Shell in Google Chrome on Chrome OS prior to 103.0.5060.114 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via di…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01148 · Published 2022-07-28 · Fixed in 103.0.5060.114 CWE-416
Priority MEDIUM 41
Type confusion in V8 in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01458 · Published 2022-07-28 · Fixed in 103.0.5060.114 CWE-843
Priority MEDIUM 40
Use after free in Cast UI and Toolbar in Google Chrome prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via UI interaction.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.00843 · Published 2022-07-28 · Fixed in 103.0.5060.134 CWE-416
Priority LOW 22
Insufficient data validation in URL formatting in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to perform domain spoofing via IDN homographs via a crafted domain name.
CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00888 · Published 2022-07-28 · Fixed in 103.0.5060.53
Priority LOW 29
Inappropriate implementation in Extensions API in Google Chrome prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to bypass discretionary access control via a crafted HTML p…
CVSS 3.1MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00668 · Published 2022-07-28 · Fixed in 103.0.5060.53
Priority MEDIUM 41
Insufficient policy enforcement in File System API in Google Chrome on Windows prior to 103.0.5060.53 allowed a remote attacker to bypass file system access via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01299 · Published 2022-07-28 · Fixed in 103.0.5060.53
Priority MEDIUM 40
Use after free in WebApp Provider in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who convinced the user to engage in specific user interactions to potentially exploit heap corruption via specific UI in…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01008 · Published 2022-07-28 · Fixed in 103.0.5060.53 CWE-416
Priority LOW 30
Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to 103.0.5060.53 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from a…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00715 · Published 2022-07-28 · Fixed in 103.0.5060.53 CWE-362
Priority MEDIUM 40
Type confusion in V8 in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01058 · Published 2022-07-28 · Fixed in 103.0.5060.53 CWE-416
Priority MEDIUM 40
Use after free in Interest groups in Google Chrome prior to 103.0.5060.53 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01029 · Published 2022-07-28 · Fixed in 103.0.5060.53 CWE-416
Priority MEDIUM 41
Use after free in Core in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.01525 · Published 2022-07-28 · Fixed in 103.0.5060.53 CWE-416
Priority CRITICAL 97KEV
Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.70833 · Published 2022-07-28 · Fixed in 103.0.5060.114 CWE-787