Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2022-03567 CVE-2022-3890 · GHSA-frfr-f9h5-9j99

Out-of-bounds write in Google Chrome

Priority MEDIUM 45

Heap buffer overflow in Crashpad in Google Chrome on Android prior to 107.0.5304.106 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01046 Published 2022-11-09 Fixed in 107.0.5304.106 CWE-787
TI-2022-03566 CVE-2022-3889 · GHSA-rxx5-wmpw-cgmp

Type confusion in Google Chrome

Priority MEDIUM 42

Type confusion in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00915 Published 2022-11-09 Fixed in 107.0.5304.106 CWE-843
TI-2022-03565 CVE-2022-3888 · GHSA-fc5r-cg4x-xwwm

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in WebCodecs in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00889 Published 2022-11-09 Fixed in 107.0.5304.106 CWE-416
TI-2022-03564 CVE-2022-3887 · GHSA-32v2-p3xf-66m9

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Web Workers in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0094 Published 2022-11-09 Fixed in 107.0.5304.106 CWE-416
TI-2022-03563 CVE-2022-3886 · GHSA-m3hm-86gc-f5c7

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in Speech Recognition in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00907 Published 2022-11-09 Fixed in 107.0.5304.106 CWE-416
TI-2022-03562 CVE-2022-3885 · GHSA-ggfm-5h26-pppx

Use after free in Google Chrome

Priority MEDIUM 42

Use after free in V8 in Google Chrome prior to 107.0.5304.106 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00984 Published 2022-11-09 Fixed in 107.0.5304.106 CWE-416