Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

10 records

TI-2026-00685 CVE-2026-0908 · GHSA-4hf5-r2xh-wq7q

Use after free in Google Chrome

Priority MEDIUM 40

Use after free in ANGLE in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2026-01-20 Partial fix · 144.0.7559.59 CWE-416
TI-2026-00682 CVE-2026-0905 · GHSA-jq9g-gj4g-q8w7

Information disclosure in Google Chrome

Priority MEDIUM 48

Insufficient policy enforcement in Network in Google Chrome prior to 144.0.7559.59 allowed an attack who obtained a network log file to potentially obtain potentially sensitive information via a network log file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0025 Published 2026-01-20 Fixed in 144.0.7559.59 CWE-200
TI-2026-00680 CVE-2026-0903 · GHSA-743w-qrv8-633j

Improper input validation in Google Chrome

Priority LOW 24

Inappropriate implementation in Downloads in Google Chrome on Windows prior to 144.0.7559.59 allowed a remote attacker to bypass dangerous file type protections via a malicious file.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00205 Published 2026-01-20 Fixed in 144.0.7559.59 CWE-20
TI-2026-00676 CVE-2026-0899 · GHSA-pr2r-wqj6-wp4h

Out-of-bounds read in Google Chrome

Priority MEDIUM 40

Out of bounds memory access in V8 in Google Chrome prior to 144.0.7559.59 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00412 Published 2026-01-20 Fixed in 144.0.7559.59 CWE-125