Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

27 records

Priority LOW 23

Insufficient data validation in loader in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had been able to write to disk to leak cross-origin data via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01461 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-668
TI-2020-05339 CVE-2020-6489 · GHSA-pmw5-hrgv-734j

Information disclosure in Google Chrome

Priority LOW 23

Inappropriate implementation in developer tools in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had convinced the user to take certain actions in developer tools to obtain potentially sensitive infor…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01633 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-200
Priority LOW 23

Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01583 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-276
Priority LOW 32

Insufficient policy enforcement in downloads in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01603 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-276
TI-2020-05335 CVE-2020-6485 · GHSA-xhwh-25xm-xgm8

Improper input validation in Google Chrome

Priority LOW 32

Insufficient data validation in media router in Google Chrome prior to 83.0.4103.61 allowed a remote attacker who had compromised the renderer process to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0172 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-20
Priority LOW 32

Insufficient data validation in ChromeDriver in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted request.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01528 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-276
Priority LOW 32

Insufficient policy enforcement in payments in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to bypass navigation restrictions via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01665 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-276
Priority LOW 32

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome E…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0134 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-276
Priority LOW 31

Insufficient policy enforcement in enterprise in Google Chrome prior to 83.0.4103.61 allowed a local attacker to bypass navigation restrictions via UI actions.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01224 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-276
TI-2020-05327 CVE-2020-6477 · GHSA-4q6x-94h2-2575

Link following in Google Chrome

Priority LOW 34

Inappropriate implementation in installer in Google Chrome on OS X prior to 83.0.4103.61 allowed a local attacker to perform privilege escalation via a crafted file.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00241 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-59
Priority LOW 32

Insufficient policy enforcement in tab strip in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to bypass navigation restrictions via a crafted Chrome Extensi…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0134 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-276
TI-2020-05324 CVE-2020-6474 · GHSA-jg7r-pwfp-87rp

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01706 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-416
TI-2020-05323 CVE-2020-6473 · GHSA-2jv5-wvvg-c9hj

Observable discrepancy in Google Chrome

Priority LOW 32

Insufficient policy enforcement in Blink in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.0178 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-203
Priority LOW 32

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to obtain potentially sensitive information from process…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01474 Published 2020-05-21 Fixed in 83.0.4103.61
Priority MEDIUM 44

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Ch…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.014 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-276
TI-2020-05320 CVE-2020-6470 · GHSA-m56m-jfmr-w52g

Cross-site scripting in Google Chrome

Priority LOW 29

Insufficient validation of untrusted input in clipboard in Google Chrome prior to 83.0.4103.61 allowed a local attacker to inject arbitrary scripts or HTML (UXSS) via crafted clipboard contents.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01037 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-79
Priority MEDIUM 44

Insufficient policy enforcement in developer tools in Google Chrome prior to 83.0.4103.61 allowed an attacker who convinced a user to install a malicious extension to potentially perform a sandbox escape via a crafted Ch…

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.0119 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-276
TI-2020-05318 CVE-2020-6468 · GHSA-9ch6-gr3w-j9vf

Out-of-bounds write in Google Chrome

Priority MEDIUM 47

Type confusion in V8 in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.06414 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-787
TI-2020-05317 CVE-2020-6467 · GHSA-32pr-fhrf-3qp7

Use after free in Google Chrome

Priority MEDIUM 41

Use after free in WebRTC in Google Chrome prior to 83.0.4103.61 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01674 Published 2020-05-21 Fixed in 83.0.4103.61 CWE-416
Load more