Priority LOW 27
Insufficient policy enforcement in extensions in Google Chrome prior to 80.0.3987.149 allowed an attacker who convinced a user to install a malicious extension to bypass site isolation via a crafted Chrome Extension.
CVSS 3.1MEDIUM 5.4· Network · No auth · User interaction · EPSS 0.0118 · Published 2020-03-23 · Fixed in 80.0.3987.149 CWE-20
Priority MEDIUM 43
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02314 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-787
Priority MEDIUM 43
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02314 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-787
Priority MEDIUM 43
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02446 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-787
Priority LOW 34
Inappropriate implementation in V8 in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.02861 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-787
Priority MEDIUM 44
Use after free in media in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.03498 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-416
Priority MEDIUM 43
Use after free in WebGL in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02354 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-787
Priority MEDIUM 43
Use after free in audio in Google Chrome prior to 80.0.3987.149 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.02664 · Published 2020-03-20 · Fixed in 80.0.3987.149 CWE-416