Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

TI-2021-04252 CVE-2021-21148 · GHSA-6675-f3rx-hqr9

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.19968 Published 2021-02-09 Fixed in 88.0.4324.150 CWE-787
TI-2021-04250 CVE-2021-21146 · GHSA-jvmc-mjgh-r2hj

Use after free in Google Chrome

Priority MEDIUM 44

Use after free in Navigation in Google Chrome prior to 88.0.4324.146 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01142 Published 2021-02-09 Fixed in 88.0.4324.146 CWE-416
TI-2021-04249 CVE-2021-21145 · GHSA-w3fw-6h3j-5r9q

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in Fonts in Google Chrome prior to 88.0.4324.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01052 Published 2021-02-09 Fixed in 88.0.4324.146 CWE-416
TI-2021-04248 CVE-2021-21144 · GHSA-7p97-3339-fvgr

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Heap buffer overflow in Tab Groups in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00884 Published 2021-02-09 Fixed in 88.0.4324.146 CWE-787
TI-2021-04247 CVE-2021-21143 · GHSA-ww6m-3fjc-mvfw

Out-of-bounds write in Google Chrome

Priority MEDIUM 40

Heap buffer overflow in Extensions in Google Chrome prior to 88.0.4324.146 allowed an attacker who convinced a user to install a malicious extension to potentially exploit heap corruption via a crafted Chrome Extension.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0083 Published 2021-02-09 Fixed in 88.0.4324.146 CWE-787
TI-2021-04246 CVE-2021-21142 · GHSA-gcqr-886q-fwf9

Use after free in Google Chrome

Priority MEDIUM 43

Use after free in Payments in Google Chrome on Mac prior to 88.0.4324.146 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

CVSS 3.1CRITICAL 9.6 Network No auth User interaction EPSS 0.01121 Published 2021-02-09 Fixed in 88.0.4324.146 CWE-416